Add pr write permissions and github token

guardian · Nov 28, 2023 · 9dd3c50 · 9dd3c50
1 parent 6a5f219
commit 9dd3c50
Show file tree

Hide file tree

Showing 9 changed files with 18 additions and 0 deletions.
diff --git a/.github/workflows/event-consumer.yml b/.github/workflows/event-consumer.yml
@@ -18,6 +18,7 @@ concurrency:
 permissions:
   id-token: write
   contents: read
+  pull-requests: write
 
 jobs:
   build:
@@ -45,6 +46,7 @@ jobs:
       - name: Upload to riff-raff
         uses: guardian/actions-riff-raff@v3
         with:
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
           projectName: mobile-n10n:eventconsumer
           buildNumberOffset: 4147
           configPath: eventconsumer/riff-raff.yaml

diff --git a/.github/workflows/fake-breaking-news.yml b/.github/workflows/fake-breaking-news.yml
@@ -20,6 +20,7 @@ concurrency:
 permissions:
   id-token: write
   contents: read
+  pull-requests: write
 
 jobs:
   build:
@@ -47,6 +48,7 @@ jobs:
       - name: Upload to riff-raff
         uses: guardian/actions-riff-raff@v3
         with:
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
           projectName: mobile-n10n:fakebreakingnewslambda
           buildNumberOffset: 4147
           configPath: fakebreakingnewslambda/riff-raff.yaml

diff --git a/.github/workflows/football.yml b/.github/workflows/football.yml
@@ -18,6 +18,7 @@ concurrency:
 permissions:
   id-token: write
   contents: read
+  pull-requests: write
 
 jobs:
   build:
@@ -45,6 +46,7 @@ jobs:
       - name: Upload to riff-raff
         uses: guardian/actions-riff-raff@v3
         with:
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
           projectName: mobile-n10n:football
           buildNumberOffset: 4147
           configPath: football/riff-raff.yaml

diff --git a/.github/workflows/notification-worker-lambdas.yml b/.github/workflows/notification-worker-lambdas.yml
@@ -20,6 +20,7 @@ concurrency:
 permissions:
   id-token: write
   contents: read
+  pull-requests: write
 
 jobs:
   build:
@@ -88,6 +89,7 @@ jobs:
       - name: Upload to riff-raff
         uses: guardian/actions-riff-raff@v3
         with:
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
           projectName: mobile-n10n:notificationworkerlambda
           buildNumberOffset: 4147
           configPath: notificationworkerlambda/riff-raff.yaml

diff --git a/.github/workflows/notification.yml b/.github/workflows/notification.yml
@@ -20,6 +20,7 @@ concurrency:
 permissions:
   id-token: write
   contents: read
+  pull-requests: write
 
 jobs:
   build:
@@ -44,6 +45,7 @@ jobs:
       - name: Upload to riff-raff
         uses: guardian/actions-riff-raff@v3
         with:
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
           projectName: mobile-n10n:notification
           buildNumberOffset: 4147
           configPath: notification/conf/riff-raff.yaml

diff --git a/.github/workflows/report-extractor.yml b/.github/workflows/report-extractor.yml
@@ -19,6 +19,7 @@ concurrency:
 permissions:
   id-token: write
   contents: read
+  pull-requests: write
 
 jobs:
   build:
@@ -46,6 +47,7 @@ jobs:
       - name: Upload to riff-raff
         uses: guardian/actions-riff-raff@v3
         with:
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
           projectName: mobile-n10n:reportextractor
           buildNumberOffset: 4147
           configPath: reportextractor/riff-raff.yaml

diff --git a/.github/workflows/report.yml b/.github/workflows/report.yml
@@ -20,6 +20,7 @@ concurrency:
 permissions:
   id-token: write
   contents: read
+  pull-requests: write
 
 jobs:
   build:
@@ -44,6 +45,7 @@ jobs:
       - name: Upload to riff-raff
         uses: guardian/actions-riff-raff@v3
         with:
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
           projectName: mobile-n10n:report
           buildNumberOffset: 4147
           configPath: report/conf/riff-raff.yaml

diff --git a/.github/workflows/schedule-lambda.yml b/.github/workflows/schedule-lambda.yml
@@ -18,6 +18,7 @@ concurrency:
 permissions:
   id-token: write
   contents: read
+  pull-requests: write
 
 jobs:
   build:
@@ -45,6 +46,7 @@ jobs:
       - name: Upload to riff-raff
         uses: guardian/actions-riff-raff@v3
         with:
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
           projectName: mobile-n10n:schedule
           buildNumberOffset: 4147
           configPath: schedulelambda/riff-raff.yaml

diff --git a/.github/workflows/slo-monitor.yml b/.github/workflows/slo-monitor.yml
@@ -19,6 +19,7 @@ concurrency:
 permissions:
   id-token: write
   contents: read
+  pull-requests: write
 
 jobs:
   build:
@@ -60,6 +61,7 @@ jobs:
       - name: Upload to riff-raff
         uses: guardian/actions-riff-raff@v3
         with:
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
           projectName: mobile-n10n:slomonitor
           buildNumberOffset: 4147
           configPath: slomonitor/riff-raff.yaml