ci: give write permission for PR comments

.github/workflows/ci.yml

@@ -25,6 +25,9 @@ env:
   PACKAGE_BUILD: ${{ !github.event.pull_request.draft }}
   PACKAGE_UPLOAD: ${{ !github.event.pull_request.draft }}
 
+permissions:
+  pull-requests: write
+
 jobs:
   setup:
     runs-on: ubuntu-latest

.github/workflows/lint-changelog.yml

@@ -16,6 +16,9 @@ on:
       - ready_for_review
       - edited
 
+permissions:
+  pull-requests: write
+
 jobs:
   lint-changelog:
     if: ${{ !github.event.pull_request.draft }}

.github/workflows/lint-clang.yml

@@ -11,6 +11,9 @@ on:
       - synchronize
       - ready_for_review
 
+permissions:
+  pull-requests: write
+
 jobs:
   lint-clang:
     runs-on: ubuntu-latest

.github/workflows/lint-cmake.yml

@@ -11,6 +11,9 @@ on:
       - synchronize
       - ready_for_review
 
+permissions:
+  pull-requests: write
+
 jobs:
   lint-cmake:
     runs-on: ubuntu-latest

.github/workflows/valgrind-analysis.yml

@@ -9,15 +9,15 @@ on:
       - synchronize
       - ready_for_review
 
+permissions:
+  pull-requests: write
+
 jobs:
   valgrind-analysis:
     runs-on: ubuntu-latest
     container: deskflow/deskflow:ubuntu-22.04-amd64
     timeout-minutes: 10
 
-    permissions:
-      pull-requests: write
-
     steps:
       - name: Checkout
         uses: actions/checkout@v4