Merge pull request #1 from Javagedes/repo-sync/mu_devops/default

Repo File Sync: synced file(s) with Javagedes/mu_devops
Javagedes · Jan 30, 2024 · e74c7ca · e74c7ca
2 parents 376207b + e563638
commit e74c7ca
Show file tree

Hide file tree

Showing 10 changed files with 48 additions and 0 deletions.
diff --git a/.github/workflows/auto-approve.yml b/.github/workflows/auto-approve.yml
@@ -23,6 +23,10 @@ on:
 
 jobs:
   approval_check:
+
+    permissions:
+      pull-requests: write
+
     if: |
       github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.user.login == 'uefibot'
     uses: microsoft/mu_devops/.github/workflows/[email protected]

diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
@@ -24,6 +24,12 @@ on:
 
 jobs:
   merge_check:
+
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+
     if: |
       github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.user.login == 'uefibot'
     uses: microsoft/mu_devops/.github/workflows/[email protected]

diff --git a/.github/workflows/issue-assignment.yml b/.github/workflows/issue-assignment.yml
@@ -18,4 +18,9 @@ on:
 
 jobs:
   apply:
+
+    permissions:
+      contents: read
+      issues: write
+
     uses: microsoft/mu_devops/.github/workflows/[email protected]
diff --git a/.github/workflows/label-issues.yml b/.github/workflows/label-issues.yml
@@ -31,4 +31,9 @@ on:
 
 jobs:
   apply:
+
+    permissions:
+      contents: read
+      pull-requests: write
+
     uses: microsoft/mu_devops/.github/workflows/[email protected]
diff --git a/.github/workflows/label-sync.yml b/.github/workflows/label-sync.yml
@@ -24,4 +24,8 @@ on:
 
 jobs:
   sync:
+
+    permissions:
+      issues: write
+
     uses: microsoft/mu_devops/.github/workflows/[email protected]
diff --git a/.github/workflows/pull-request-formatting-validator.yml b/.github/workflows/pull-request-formatting-validator.yml
@@ -23,6 +23,11 @@ on:
 jobs:
   validate_pr:
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      pull-requests: write
+
     steps:
       - run: |
           prTitle="$(gh api graphql -F owner=$OWNER -F name=$REPO -F pr_number=$PR_NUMBER -f query='

diff --git a/.github/workflows/release-draft.yml b/.github/workflows/release-draft.yml
@@ -27,5 +27,10 @@ on:
 
 jobs:
   draft:
+
+    permissions:
+      contents: write
+      pull-requests: write
+
     uses: microsoft/mu_devops/.github/workflows/[email protected]
     secrets: inherit
diff --git a/.github/workflows/scheduled-maintenance.yml b/.github/workflows/scheduled-maintenance.yml
@@ -24,6 +24,11 @@ on:
 jobs:
   repo_cleanup:
     runs-on: ubuntu-latest
+
+    permissions:
+      pull-requests: write
+      issues: write
+
     steps:
       - name: Get Repository Info
         run: echo "REPOSITORY_NAME=${GITHUB_REPOSITORY#*/}" >> $GITHUB_ENV

diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
@@ -24,4 +24,9 @@ on:
 
 jobs:
   check:
+
+    permissions:
+      issues: write
+      pull-requests: write
+
     uses: microsoft/mu_devops/.github/workflows/[email protected]
diff --git a/.github/workflows/triage-issues.yml b/.github/workflows/triage-issues.yml
@@ -19,4 +19,8 @@ on:
 
 jobs:
   triage:
+
+    permissions:
+      issues: write
+
     uses: microsoft/mu_devops/.github/workflows/[email protected]