tweak workflow perms to allow running certain checks in fork PR upstr…

…eam target HEAD (#295)
openziti · Jan 29, 2025 · 3d61fcf · 3d61fcf
1 parent 552fe38
commit 3d61fcf
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/.github/workflows/release-notes.yml b/.github/workflows/release-notes.yml
@@ -1,9 +1,12 @@
 name: Release Notes Labeler
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, synchronize, reopened]
 
+# Set default permissions as read only
+permissions: read-all
+
 jobs:
   release-notes-labeler:
     permissions:
@@ -21,8 +24,8 @@ jobs:
         uses: maxisam/[email protected]
         with:
             authToken: ${{ secrets.GITHUB_TOKEN }}
-            basePaths: 'charts'
-            prefixes: 'notes|skip'
+            basePaths: charts
+            prefixes: notes|skip
             includedGlob: ""  # no filter
             debugShowPaths: true
             layers: 1