Add token rights?

sbt · Oct 31, 2024 · 8e4748e · 8e4748e
1 parent ad001cb
commit 8e4748e
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/update-default.yml b/.github/workflows/update-default.yml
@@ -6,6 +6,9 @@ jobs:
   update_default:
     runs-on: ubuntu-latest
     timeout-minutes: 3
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@v4
       - id: update_default
@@ -22,9 +25,12 @@ jobs:
           else
             echo "pushed=false" >> $GITHUB_OUTPUT
           fi
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - uses: actions/github-script@v7
         if: steps.update_default.outputs.pushed == 'true'
         with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
             await github.rest.pulls.create({
               owner: context.repo.owner,