breakage workflow: update permissions

dpo · web-flow · commit 01f6c8b23a80 · 2025-04-09T18:52:56.000-04:00
The final step of the breakage workflow (breakage/upload)
fails when a pull request comes from a fork because
GITHUB_TOKEN restricts permissions in that scenario.
This PR always allows breakage/upload to run.
diff --git a/.github/workflows/Breakage.yml b/.github/workflows/Breakage.yml
@@ -1,6 +1,11 @@
 # Ref: https://securitylab.github.com/research/github-actions-preventing-pwn-requests
 name: Breakage
 
+# allow breakage/upload when a PR comes from a fork
+permissions:
+  contents: write
+  pull-requests: write
+
 # read-only repo token
 # no access to secrets
 on:
