Fix permissions in the "Check PR" action. (#19124)

* Add missing permissions or pr-check.yml * Add comments
DataDog · Nov 25, 2024 · f684057 · f684057
1 parent fb31dc3
commit f684057
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/.github/workflows/pr-check.yml b/.github/workflows/pr-check.yml
@@ -12,6 +12,10 @@ jobs:
   run:
     uses: ./.github/workflows/pr-quick-check.yml
     if: ${{ github.base_ref == 'master' }}
+    permissions: # These permissions need to match the ones in the included workflow, see pr-quick-check.yml for details
+      pull-requests: write
+      contents: read
     with:
       repo: core
     secrets: inherit
+
diff --git a/.github/workflows/pr-quick-check.yml b/.github/workflows/pr-quick-check.yml
@@ -21,8 +21,8 @@ jobs:
     runs-on: ubuntu-22.04
 
     permissions:
-      pull-requests: write
-      contents: read
+      pull-requests: write # For the "Comment" step, read for the "Fetch script" and "Check changelog" steps
+      contents: read # For the "Fetch diff" and "Check changelog" steps
 
     steps:
     # Uncomment for testing purposes