summary refs log tree commit diff
path: root/.github/workflows
diff options
context:
space:
mode:
authorzowoq <59103226+zowoq@users.noreply.github.com>2022-09-11 17:01:47 +1000
committerzowoq <59103226+zowoq@users.noreply.github.com>2022-09-12 15:34:35 +1000
commitbbe49339b81aa7acc13612d78ace0e4cfcaaaa6b (patch)
treef0cd0b980a67d1d1f4e9607a14f7271c603db998 /.github/workflows
parent88199c6df95b3f7a8b8bbcaf4dd8977612f219c0 (diff)
downloadnixpkgs-bbe49339b81aa7acc13612d78ace0e4cfcaaaa6b.tar
nixpkgs-bbe49339b81aa7acc13612d78ace0e4cfcaaaa6b.tar.gz
nixpkgs-bbe49339b81aa7acc13612d78ace0e4cfcaaaa6b.tar.bz2
nixpkgs-bbe49339b81aa7acc13612d78ace0e4cfcaaaa6b.tar.lz
nixpkgs-bbe49339b81aa7acc13612d78ace0e4cfcaaaa6b.tar.xz
nixpkgs-bbe49339b81aa7acc13612d78ace0e4cfcaaaa6b.tar.zst
nixpkgs-bbe49339b81aa7acc13612d78ace0e4cfcaaaa6b.zip
.github/workflows: fix permissions
the merge actions comment on pull requests, seems this was broken by 2c71278a2395d6d8c4e06d1ebe4de1ffdae727c7

also:
- fix permissions on new manual rendering action
- drop unnecessary issues permission from the terraform action
Diffstat (limited to '.github/workflows')
-rw-r--r--.github/workflows/manual-rendering.yml2
-rw-r--r--.github/workflows/periodic-merge-24h.yml2
-rw-r--r--.github/workflows/periodic-merge-6h.yml2
-rw-r--r--.github/workflows/update-terraform-providers.yml3
4 files changed, 4 insertions, 5 deletions
diff --git a/.github/workflows/manual-rendering.yml b/.github/workflows/manual-rendering.yml
index 4f5486f2acf..5d2518dffc0 100644
--- a/.github/workflows/manual-rendering.yml
+++ b/.github/workflows/manual-rendering.yml
@@ -13,7 +13,7 @@ permissions:
 jobs:
   check-rendering-equivalence:
     permissions:
-      issues: write  # for peter-evans/create-or-update-comment to create or update comment
+      pull-requests: write  # for peter-evans/create-or-update-comment to create or update comment
     if: github.repository_owner == 'NixOS'
     runs-on: ubuntu-latest
     steps:
diff --git a/.github/workflows/periodic-merge-24h.yml b/.github/workflows/periodic-merge-24h.yml
index 2eec69f6525..e8ec1349602 100644
--- a/.github/workflows/periodic-merge-24h.yml
+++ b/.github/workflows/periodic-merge-24h.yml
@@ -21,7 +21,7 @@ jobs:
   periodic-merge:
     permissions:
       contents: write  # for devmasx/merge-branch to merge branches
-      issues: write  # for peter-evans/create-or-update-comment to create or update comment
+      pull-requests: write  # for peter-evans/create-or-update-comment to create or update comment
     if: github.repository_owner == 'NixOS'
     runs-on: ubuntu-latest
     strategy:
diff --git a/.github/workflows/periodic-merge-6h.yml b/.github/workflows/periodic-merge-6h.yml
index bcc9f488358..764ccaec0df 100644
--- a/.github/workflows/periodic-merge-6h.yml
+++ b/.github/workflows/periodic-merge-6h.yml
@@ -21,7 +21,7 @@ jobs:
   periodic-merge:
     permissions:
       contents: write  # for devmasx/merge-branch to merge branches
-      issues: write  # for peter-evans/create-or-update-comment to create or update comment
+      pull-requests: write  # for peter-evans/create-or-update-comment to create or update comment
     if: github.repository_owner == 'NixOS'
     runs-on: ubuntu-latest
     strategy:
diff --git a/.github/workflows/update-terraform-providers.yml b/.github/workflows/update-terraform-providers.yml
index 1650f537b7b..1ae78a4fb8f 100644
--- a/.github/workflows/update-terraform-providers.yml
+++ b/.github/workflows/update-terraform-providers.yml
@@ -12,8 +12,7 @@ jobs:
   tf-providers:
     permissions:
       contents: write  # for peter-evans/create-pull-request to create branch
-      issues: write  # for peter-evans/create-or-update-comment to create or update comment
-      pull-requests: write  # for peter-evans/create-pull-request to create a PR
+      pull-requests: write  # for peter-evans/create-pull-request to create a PR, for peter-evans/create-or-update-comment to create or update comment
     if: github.repository_owner == 'NixOS' && github.ref == 'refs/heads/master' # ensure workflow_dispatch only runs on master
     runs-on: ubuntu-latest
     steps: