From 4073bea4e6c0cbd1233ab7f70b86b88098a9054d Mon Sep 17 00:00:00 2001
From: "Andrew W. Harn" <andrew.harn@broadcom.com>
Date: Mon, 9 Sep 2024 13:17:51 -0400
Subject: [PATCH] Update workflows (v3)

Signed-off-by: Andrew W. Harn <andrew.harn@broadcom.com>
---
 .github/workflows/audit.yml           | 4 ++--
 .github/workflows/auto-comment.yml    | 2 ++
 .github/workflows/update-project.yml  | 3 +++
 .github/workflows/zowe-cli-plugin.yml | 5 ++++-
 4 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index 1e9c1c4c..621a9447 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -6,8 +6,8 @@ on:
       - master
       - zowe-v?-lts
       - next
-  # schedule:
-  #   - cron: '0 10 * * *'
+  schedule:
+    - cron: '0 10 * * *'
 
 jobs:
   audit:
diff --git a/.github/workflows/auto-comment.yml b/.github/workflows/auto-comment.yml
index 8f0f97b6..c908aab2 100644
--- a/.github/workflows/auto-comment.yml
+++ b/.github/workflows/auto-comment.yml
@@ -3,6 +3,8 @@ name: Auto Responder for New Issues
 on:
   issues:
     types: labeled
+permissions:
+  issues: write
 
 jobs:
   processLabelAction:
diff --git a/.github/workflows/update-project.yml b/.github/workflows/update-project.yml
index 66945877..d429d59f 100644
--- a/.github/workflows/update-project.yml
+++ b/.github/workflows/update-project.yml
@@ -12,6 +12,9 @@ env:
   PR_STATUS_DRAFT: 'In Progress'
   PR_STATUS_READY: 'Review/QA'
 
+permissions:
+  pull-requests: write
+
 jobs:
   update-project:
     name: Move project item
diff --git a/.github/workflows/zowe-cli-plugin.yml b/.github/workflows/zowe-cli-plugin.yml
index a53b3557..bc516a48 100644
--- a/.github/workflows/zowe-cli-plugin.yml
+++ b/.github/workflows/zowe-cli-plugin.yml
@@ -87,7 +87,10 @@ jobs:
     if: github.event_name == 'push' && github.ref_protected
     needs: test
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
     steps:
     - name: Checkout
       uses: actions/checkout@v4