ci: update agreement's job permissions (#295)

splunk · Jul 18, 2023 · 79146e2 · 79146e2
1 parent 29e8809
commit 79146e2
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/workflows/agreements.yaml b/.github/workflows/agreements.yaml
@@ -7,7 +7,12 @@ on:
 
 jobs:
   call-workflow-agreements:
-    uses: splunk/addonfactory-github-workflows/.github/workflows/[email protected]
+    uses: splunk/addonfactory-github-workflows/.github/workflows/reusable-agreements.yaml@v1
+    permissions:
+      actions: read
+      contents: read
+      pull-requests: write
+      statuses: read
     secrets:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       PERSONAL_ACCESS_TOKEN: ${{ secrets.PAT_CLATOOL }}