From c5df5b1247d747969b26c9114fea5420eccb56de Mon Sep 17 00:00:00 2001 From: Emilien Escalle Date: Mon, 27 Mar 2023 20:35:55 +0200 Subject: [PATCH] fix(workflows/release-actions): add actions permissions --- .github/workflows/release-actions.yml | 1 + actions/create-and-merge-pull-request/action.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/release-actions.yml b/.github/workflows/release-actions.yml index f092c80..41bb56e 100644 --- a/.github/workflows/release-actions.yml +++ b/.github/workflows/release-actions.yml @@ -177,6 +177,7 @@ jobs: permissions: pull-requests: write contents: write + actions: write steps: - uses: actions/checkout@v3.1.0 diff --git a/actions/create-and-merge-pull-request/action.yml b/actions/create-and-merge-pull-request/action.yml index edb2559..1f9658c 100644 --- a/actions/create-and-merge-pull-request/action.yml +++ b/actions/create-and-merge-pull-request/action.yml @@ -9,6 +9,7 @@ inputs: github-token: description: "GitHub token for creating and merging pull request (permissions contents: write and pull-requests: write). See https://github.com/peter-evans/create-pull-request#action-inputs" default: ${{ github.token }} + required: true private-access-token: description: "GitHub private access token for approving & merging pull request. Must be different from github-token. See https://cli.github.com/manual/gh_pr_merge" required: true