Fix GH action permissions (#3680)

* Fix GH action permissions * Update comment-bot.yml * Update comment-bot.yml * Update code-freeze.yml
adoptium · Mar 2, 2024 · fd05907 · fd05907
1 parent c6a9fe2
commit fd05907
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 3 deletions.
diff --git a/.github/workflows/code-freeze.yml b/.github/workflows/code-freeze.yml
@@ -7,6 +7,10 @@ on:
   issue_comment:
     types: [created]
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   codefreeze:
     uses: adoptium/.github/.github/workflows/code-freeze.yml@main

diff --git a/.github/workflows/comment-bot.yml b/.github/workflows/comment-bot.yml
@@ -5,10 +5,12 @@ on:
     types: [ opened ]
 
 jobs:
-  Comment:
+  comment:
+    permissions:
+      issues: write
+      pull-requests: write
     name: Add Comment
     runs-on: ubuntu-latest
-
     steps:
       - name: Create comment
         uses: JJ/pr-greeting-action@01953a8c191056b059c8dbc667d833aa082fd865 # releases/v1

diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
@@ -7,7 +7,11 @@ on:
   issue_comment:
 
 jobs:
-  Label:
+  label:
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
     runs-on: ubuntu-latest
     name: Assign Labels
     steps: