From e6e072a28e568b37860ddb688b48a20fa5990333 Mon Sep 17 00:00:00 2001
From: James Bruten <109733895+james-bruten-mo@users.noreply.github.com>
Date: Mon, 12 Jan 2026 14:55:41 +0000
Subject: [PATCH 1/2] add project workflow

---
 .github/workflows/track-review-project.yaml     | 12 ++++++++++++
 .github/workflows/trigger-project-workflow.yaml | 12 ++++++++++++
 2 files changed, 24 insertions(+)
 create mode 100644 .github/workflows/track-review-project.yaml
 create mode 100644 .github/workflows/trigger-project-workflow.yaml

diff --git a/.github/workflows/track-review-project.yaml b/.github/workflows/track-review-project.yaml
new file mode 100644
index 0000000..c636b86
--- /dev/null
+++ b/.github/workflows/track-review-project.yaml
@@ -0,0 +1,12 @@
+name: Track Review Project
+
+on:
+  workflow_run:
+    workflows: [Trigger Review Project]
+    types:
+      - completed
+
+jobs:
+  track_review_project:
+    uses: MetOffice/growss/.github/workflows/track-review-project.yaml@main
+    secrets: inherit
diff --git a/.github/workflows/trigger-project-workflow.yaml b/.github/workflows/trigger-project-workflow.yaml
new file mode 100644
index 0000000..c0215bb
--- /dev/null
+++ b/.github/workflows/trigger-project-workflow.yaml
@@ -0,0 +1,12 @@
+name: Trigger Review Project
+
+on:
+  pull_request_target:
+    types: ["opened", "synchronize", "reopened", "edited", "review_requested", "review_request_removed"]
+  pull_request_review:
+  pull_request_review_comment:
+
+jobs:
+  trigger_project_workflow:
+    uses: MetOffice/growss/.github/workflows/trigger-project-workflow.yaml@main
+    secrets: inherit

From 48f20c3de160112fc5cf86fe7a06b3734a51e644 Mon Sep 17 00:00:00 2001
From: James Bruten <109733895+james-bruten-mo@users.noreply.github.com>
Date: Tue, 13 Jan 2026 08:34:18 +0000
Subject: [PATCH 2/2] add permissions

---
 .github/workflows/track-review-project.yaml     | 5 +++++
 .github/workflows/trigger-project-workflow.yaml | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/.github/workflows/track-review-project.yaml b/.github/workflows/track-review-project.yaml
index c636b86..639477c 100644
--- a/.github/workflows/track-review-project.yaml
+++ b/.github/workflows/track-review-project.yaml
@@ -6,6 +6,11 @@ on:
     types:
       - completed
 
+permissions:
+  actions: read
+  contents: read
+  pull-requests: write
+
 jobs:
   track_review_project:
     uses: MetOffice/growss/.github/workflows/track-review-project.yaml@main
diff --git a/.github/workflows/trigger-project-workflow.yaml b/.github/workflows/trigger-project-workflow.yaml
index c0215bb..4d0a8f6 100644
--- a/.github/workflows/trigger-project-workflow.yaml
+++ b/.github/workflows/trigger-project-workflow.yaml
@@ -6,6 +6,11 @@ on:
   pull_request_review:
   pull_request_review_comment:
 
+permissions:
+  actions: read
+  contents: read
+  pull-requests: write
+
 jobs:
   trigger_project_workflow:
     uses: MetOffice/growss/.github/workflows/trigger-project-workflow.yaml@main