Fixes

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,6 @@
+Part of <!-- 
+  Only for standalone PRs without Jira issue in the PR title: 
+    * Replace this comment with Epic ID to create a new Task in Jira
+    * Replace this comment with Issue ID to create a new Sub-Task in Jira
+    * Ignore or delete this note to create a new Task in Jira without a parent 
+-->

.github/workflows/PullRequestClosed.yml

@@ -8,6 +8,9 @@ jobs:
   PullRequestMerged_job:
     name: Pull Request Merged
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      pull-requests: read
     # For external PR, ticket should be moved manually
     if: |
         github.event.pull_request.head.repo.full_name == github.repository

.github/workflows/PullRequestCreated.yml

@@ -8,11 +8,11 @@ jobs:
   PullRequestCreated_job:
     name: Pull Request Created
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     # For external PR, ticket should be created manually
     if: |
         github.event.pull_request.head.repo.full_name == github.repository
-    permissions:
-      id-token: write
     steps:
       - id: secrets
         uses: SonarSource/vault-action-wrapper@v3

.github/workflows/RequestReview.yml

@@ -8,11 +8,11 @@ jobs:
   RequestReview_job:
     name: Request review
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     # For external PR, ticket should be moved manually
     if: |
         github.event.pull_request.head.repo.full_name == github.repository
-    permissions:
-      id-token: write
     steps:
       - id: secrets
         uses: SonarSource/vault-action-wrapper@v3

.github/workflows/SubmitReview.yml

@@ -8,6 +8,9 @@ jobs:
   SubmitReview_job:
     name: Submit Review
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      pull-requests: read
     # For external PR, ticket should be moved manually
     if: |
         github.event.pull_request.head.repo.full_name == github.repository