More workflow permissions (microsoft#3846)

more permissions
ImperialCollegeLondon · Feb 8, 2024 · 3835e5a · 3835e5a
1 parent fab7bc3
commit 3835e5a
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/deploy_tre.yml b/.github/workflows/deploy_tre.yml
@@ -28,6 +28,8 @@ jobs:
     uses: ./.github/workflows/deploy_tre_reusable.yml
     permissions:
       checks: write
+      contents: read
+      pull-requests: write
     with:
       ciGitRef: ${{ github.ref }}
       e2eTestsCustomSelector: >-

diff --git a/.github/workflows/deploy_tre_branch.yml b/.github/workflows/deploy_tre_branch.yml
@@ -60,6 +60,8 @@ jobs:
     uses: ./.github/workflows/deploy_tre_reusable.yml
     permissions:
       checks: write
+      contents: read
+      pull-requests: write
     with:
       ciGitRef: ${{ github.ref }}
       prHeadSha: ${{ github.sha }}

diff --git a/.github/workflows/pr_comment_bot.yml b/.github/workflows/pr_comment_bot.yml
@@ -152,6 +152,8 @@ jobs:
     uses: ./.github/workflows/deploy_tre_reusable.yml
     permissions:
       checks: write
+      contents: read
+      pull-requests: write
     with:
       prRef: ${{ needs.pr_comment.outputs.prRef }}
       prHeadSha: ${{ needs.pr_comment.outputs.prHeadSha }}