[ci] Add missing permissions (#32707)
Missed these ones earlier. --- [//]: # (BEGIN SAPLING FOOTER) Stack created with [Sapling](https://sapling-scm.com). Best reviewed with [ReviewStack](https://reviewstack.dev/facebook/react/pull/32707). * #32708 * __->__ #32707
lauren committed
Mar 21, 2025 at 16:07 UTC
fe8c10695cc65502b3e9f9db4b6dbf20f521bb7e
4 files changed
+15
.github/workflows/compiler_discord_notify.yml
+3
@@ -12,6 +12,9 @@ permissions: {}
12
jobs:
13
check_maintainer:
14
uses: facebook/react/.github/workflows/shared_check_maintainer.yml@main
15
+ permissions:
16
+ # Used by check_maintainer
17
+ contents: read
18
with:
19
actor: ${{ github.event.pull_request.user.login }}
20
.github/workflows/runtime_discord_notify.yml
+3
@@ -12,6 +12,9 @@ permissions: {}
12
jobs:
13
check_maintainer:
14
uses: facebook/react/.github/workflows/shared_check_maintainer.yml@main
15
+ permissions:
16
+ # Used by check_maintainer
17
+ contents: read
18
with:
19
actor: ${{ github.event.pull_request.user.login }}
20
.github/workflows/shared_close_direct_sync_branch_prs.yml
+3
@@ -15,6 +15,9 @@ env:
15
jobs:
16
close_pr:
17
runs-on: ubuntu-latest
18
+ permissions:
19
+ # Used to create a review and close PRs
20
+ pull-requests: write
21
steps:
22
- name: Close PR
23
uses: actions/github-script@v7
.github/workflows/shared_label_core_team_prs.yml
+6
@@ -13,6 +13,9 @@ env:
13
jobs:
14
check_maintainer:
15
uses: facebook/react/.github/workflows/shared_check_maintainer.yml@main
16
+ permissions:
17
+ # Used by check_maintainer
18
+ contents: read
19
with:
20
actor: ${{ github.event.pull_request.user.login }}
21
@@ -20,6 +23,9 @@ jobs:
23
if: ${{ needs.check_maintainer.outputs.is_core_team == 'true' }}
24
runs-on: ubuntu-latest
25
needs: check_maintainer
26
+ permissions:
27
+ # Used to add labels
28
+ issues: write
29
steps:
30
- name: Label PR as React Core Team
31
uses: actions/github-script@v7