senzing-factory/build-resources#124 reuse add to project and update permissions (#350)

Author: kernelsam

.github/workflows/add-labels-standardized.yaml

@@ -6,10 +6,11 @@ on:
       - opened
       - reopened
 
+permissions:
+  issues: write
+
 jobs:
   add-issue-labels:
-    permissions:
-      issues: write
     secrets:
       ORG_MEMBERSHIP_TOKEN: ${{ secrets.ORG_MEMBERSHIP_TOKEN }}
       SENZING_MEMBERS: ${{ secrets.SENZING_MEMBERS }}

.github/workflows/add-to-project-garage.yaml

@@ -6,14 +6,15 @@ on:
       - opened
       - reopened
 
+permissions:
+  repository-projects: write
+
 jobs:
   add-to-project:
-    name: add issue to project
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: assign issue to project
-        uses: actions/[email protected]
-        with:
-          github-token: ${{ secrets.SENZING_GITHUB_ACCESS_TOKEN }}
-          project-url: https://github.com/orgs/${{ vars.SENZING_GITHUB_ACCOUNT_NAME }}/projects/${{ vars.SENZING_PROJECT_GARAGE }}
+    secrets:
+      SENZING_GITHUB_PROJECT_RW_TOKEN: ${{ secrets.SENZING_GITHUB_PROJECT_RW_TOKEN }}
+    uses: senzing-factory/build-resources/.github/workflows/add-to-project.yaml@v1
+    with:
+      classic: false
+      project-number: ${{ vars.SENZING_PROJECT_GARAGE }}
+      org: ${{ vars.SENZING_GITHUB_ACCOUNT_NAME }}

.github/workflows/move-pr-to-done-dependabot.yaml

@@ -5,6 +5,9 @@ on:
     branches: [main]
     types: [closed]
 
+permissions:
+  repository-projects: write
+
 jobs:
   move-pr-to-done-dependabot:
     secrets: