From fb083823bd0cd012a538551460277aef20a57801 Mon Sep 17 00:00:00 2001 From: Charlie Kolb Date: Fri, 2 Oct 2026 08:20:30 +0000 Subject: [PATCH] ci: Grant permissions to boundaries baseline automerge (#39852) --- .github/workflows/util-update-boundaries-baseline.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/util-update-boundaries-baseline.yml b/.github/workflows/util-update-boundaries-baseline.yml index baab13cc3d5..4caa85d6038 100644 --- a/.github/workflows/util-update-boundaries-baseline.yml +++ b/.github/workflows/util-update-boundaries-baseline.yml @@ -100,6 +100,9 @@ jobs: approve-and-automerge: needs: [update-baseline] if: needs.update-baseline.outputs.pull-request-number != '' + permissions: + contents: write + pull-requests: write # The callee's app credentials live on the release environment and cannot # be forwarded as named secrets by the caller. uses: ./.github/workflows/util-approve-and-set-automerge.yml # zizmor: ignore[secrets-inherit]