Merge pull request nextcloud#206 from nextcloud/feat/workflow-auto-up…

…date-dependabot-approve-merge.yml Updating dependabot-approve-merge.yml workflow from template
gnumpi · Aug 8, 2022 · 4be24bc · 4be24bc
2 parents 9708e02 + 1d4f70f
commit 4be24bc
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/dependabot-approve-merge.yml b/.github/workflows/dependabot-approve-merge.yml
@@ -12,10 +12,16 @@ on:
       - master
       - stable*
 
+permissions:
+  contents: read
+
 jobs:
   auto-approve-merge:
     if: github.actor == 'dependabot[bot]'
     runs-on: ubuntu-latest
+    permissions:
+      # for hmarr/auto-approve-action to approve PRs
+      pull-requests: write 
 
     steps:
       # Github actions bot approve