From 3ddec99edbce685d8a45172584fc0aa880ace241 Mon Sep 17 00:00:00 2001
From: Victor Martinez <victormartinezrubio@gmail.com>
Date: Fri, 18 Oct 2024 22:49:07 +0200
Subject: [PATCH] [8.14] github-actions: pull_request in forked PRs cannot
 change permissions scope (#196550) (#196632)

# Backport

This will backport the following commits from `main` to `8.14`:
- [github-actions: pull_request in forked PRs cannot change permissions
scope (#196550)](https://github.com/elastic/kibana/pull/196550)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Victor
Martinez","email":"victormartinezrubio@gmail.com"},"sourceCommit":{"committedDate":"2024-10-17T01:33:19Z","message":"github-actions:
pull_request in forked PRs cannot change permissions scope
(#196550)","sha":"4b09db32f4da6e02068c7888d1888242129eec88","branchLabelMapping":{"^v9.0.0$":"main","^v8.16.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","v8.1.4","backport:all-open","v8.16.0","v8.14.4","backport:version","v8.15.3"],"number":196550,"url":"https://github.com/elastic/kibana/pull/196550","mergeCommit":{"message":"github-actions:
pull_request in forked PRs cannot change permissions scope
(#196550)","sha":"4b09db32f4da6e02068c7888d1888242129eec88"}},"sourceBranch":"main","suggestedTargetBranches":["8.1","8.14"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/196550","number":196550,"mergeCommit":{"message":"github-actions:
pull_request in forked PRs cannot change permissions scope
(#196550)","sha":"4b09db32f4da6e02068c7888d1888242129eec88"}},{"branch":"8.1","label":"v8.1.4","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.16.0","labelRegex":"^v8.16.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/196623","number":196623,"state":"MERGED","mergeCommit":{"sha":"e0cbcd6239de174da6632895568594e1732cb206","message":"[8.x]
github-actions: pull_request in forked PRs cannot change permissions
scope (#196550) (#196623)\n\n# Backport\n\nThis will backport the
following commits from `main` to `8.x`:\n- [github-actions: pull_request
in forked PRs cannot change permissions\nscope
(#196550)](https://github.com/elastic/kibana/pull/196550)\n\n<!---
Backport version: 9.4.3 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Victor\nMartinez\",\"email\":\"victormartinezrubio@gmail.com\"},\"sourceCommit\":{\"committedDate\":\"2024-10-17T01:33:19Z\",\"message\":\"github-actions:\npull_request
in forked PRs cannot change permissions
scope\n(#196550)\",\"sha\":\"4b09db32f4da6e02068c7888d1888242129eec88\",\"branchLabelMapping\":{\"^v9.0.0$\":\"main\",\"^v8.16.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"release_note:skip\",\"v9.0.0\",\"backport:all-open\"],\"title\":\"github-actions:\npull_request
in forked PRs cannot change
permissions\nscope\",\"number\":196550,\"url\":\"https://github.com/elastic/kibana/pull/196550\",\"mergeCommit\":{\"message\":\"github-actions:\npull_request
in forked PRs cannot change permissions
scope\n(#196550)\",\"sha\":\"4b09db32f4da6e02068c7888d1888242129eec88\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.0.0\",\"branchLabelMappingKey\":\"^v9.0.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/196550\",\"number\":196550,\"mergeCommit\":{\"message\":\"github-actions:\npull_request
in forked PRs cannot change permissions
scope\n(#196550)\",\"sha\":\"4b09db32f4da6e02068c7888d1888242129eec88\"}}]}]\nBACKPORT-->\n\nCo-authored-by:
Victor Martinez
<victormartinezrubio@gmail.com>"}},{"branch":"8.14","label":"v8.14.4","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.15","label":"v8.15.3","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/196622","number":196622,"state":"MERGED","mergeCommit":{"sha":"78986c3f6c87dd04136b1ecd9e2c3d2366da9979","message":"[8.15]
github-actions: pull_request in forked PRs cannot change permissions
scope (#196550) (#196622)\n\n# Backport\n\nThis will backport the
following commits from `main` to `8.15`:\n- [github-actions:
pull_request in forked PRs cannot change permissions\nscope
(#196550)](https://github.com/elastic/kibana/pull/196550)\n\n<!---
Backport version: 9.4.3 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Victor\nMartinez\",\"email\":\"victormartinezrubio@gmail.com\"},\"sourceCommit\":{\"committedDate\":\"2024-10-17T01:33:19Z\",\"message\":\"github-actions:\npull_request
in forked PRs cannot change permissions
scope\n(#196550)\",\"sha\":\"4b09db32f4da6e02068c7888d1888242129eec88\",\"branchLabelMapping\":{\"^v9.0.0$\":\"main\",\"^v8.16.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"release_note:skip\",\"v9.0.0\",\"backport:all-open\"],\"title\":\"github-actions:\npull_request
in forked PRs cannot change
permissions\nscope\",\"number\":196550,\"url\":\"https://github.com/elastic/kibana/pull/196550\",\"mergeCommit\":{\"message\":\"github-actions:\npull_request
in forked PRs cannot change permissions
scope\n(#196550)\",\"sha\":\"4b09db32f4da6e02068c7888d1888242129eec88\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.0.0\",\"branchLabelMappingKey\":\"^v9.0.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/196550\",\"number\":196550,\"mergeCommit\":{\"message\":\"github-actions:\npull_request
in forked PRs cannot change permissions
scope\n(#196550)\",\"sha\":\"4b09db32f4da6e02068c7888d1888242129eec88\"}}]}]\nBACKPORT-->\n\nCo-authored-by:
Victor Martinez
<victormartinezrubio@gmail.com>"}},{"url":"https://github.com/elastic/kibana/pull/196631","number":196631,"branch":"8.16","state":"OPEN"}]}]
BACKPORT-->
---
 .github/workflows/oblt-github-commands.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/oblt-github-commands.yml b/.github/workflows/oblt-github-commands.yml
index 4388901e2fa0e..01d03216af04f 100644
--- a/.github/workflows/oblt-github-commands.yml
+++ b/.github/workflows/oblt-github-commands.yml
@@ -18,6 +18,9 @@ permissions:
 jobs:
   comment-if-oblt-member:
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
     steps:
       - uses: elastic/apm-pipeline-library/.github/actions/github-token@current
         with: