Fix: Allow dependency review workflow to add comments to a PR

The workflow requires the pull-request write permission because it wants to add a comment to the current PR.
greenbone · Feb 10, 2025 · 309bf9e · 309bf9e
1 parent 6400e32
commit 309bf9e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -1,8 +1,11 @@
 name: 'Dependency Review'
-on: [pull_request]
+
+on:
+  pull_request
 
 permissions:
   contents: read
+  pull-requests: write
 
 jobs:
   dependency-review: