From 3300e67913f171d1ced9706242723a0c9b801a32 Mon Sep 17 00:00:00 2001
From: Nick Bolton <nick@symless.com>
Date: Fri, 20 Sep 2024 19:37:33 +0100
Subject: [PATCH] ci: give write permission for PR comments

---
 .github/workflows/ci.yml                | 3 +++
 .github/workflows/lint-changelog.yml    | 3 +++
 .github/workflows/lint-clang.yml        | 3 +++
 .github/workflows/lint-cmake.yml        | 3 +++
 .github/workflows/valgrind-analysis.yml | 6 +++---
 5 files changed, 15 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8c7b4aab6..69599fa4c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -25,6 +25,9 @@ env:
   PACKAGE_BUILD: ${{ !github.event.pull_request.draft }}
   PACKAGE_UPLOAD: ${{ !github.event.pull_request.draft }}
 
+permissions:
+  pull-requests: write
+
 jobs:
   setup:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/lint-changelog.yml b/.github/workflows/lint-changelog.yml
index 9894894a9..1a5005756 100644
--- a/.github/workflows/lint-changelog.yml
+++ b/.github/workflows/lint-changelog.yml
@@ -16,6 +16,9 @@ on:
       - ready_for_review
       - edited
 
+permissions:
+  pull-requests: write
+
 jobs:
   lint-changelog:
     if: ${{ !github.event.pull_request.draft }}
diff --git a/.github/workflows/lint-clang.yml b/.github/workflows/lint-clang.yml
index 01408e226..37a4e5e0f 100644
--- a/.github/workflows/lint-clang.yml
+++ b/.github/workflows/lint-clang.yml
@@ -11,6 +11,9 @@ on:
       - synchronize
       - ready_for_review
 
+permissions:
+  pull-requests: write
+
 jobs:
   lint-clang:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/lint-cmake.yml b/.github/workflows/lint-cmake.yml
index f4631e312..dfa6d99d7 100644
--- a/.github/workflows/lint-cmake.yml
+++ b/.github/workflows/lint-cmake.yml
@@ -11,6 +11,9 @@ on:
       - synchronize
       - ready_for_review
 
+permissions:
+  pull-requests: write
+
 jobs:
   lint-cmake:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/valgrind-analysis.yml b/.github/workflows/valgrind-analysis.yml
index b3a9d2d68..61089643e 100644
--- a/.github/workflows/valgrind-analysis.yml
+++ b/.github/workflows/valgrind-analysis.yml
@@ -9,15 +9,15 @@ on:
       - synchronize
       - ready_for_review
 
+permissions:
+  pull-requests: write
+
 jobs:
   valgrind-analysis:
     runs-on: ubuntu-latest
     container: deskflow/deskflow:ubuntu-22.04-amd64
     timeout-minutes: 10
 
-    permissions:
-      pull-requests: write
-
     steps:
       - name: Checkout
         uses: actions/checkout@v4