From aae57378f0fb3c2c8843a1b202244716a341cf9c Mon Sep 17 00:00:00 2001 From: Alex Corey Date: Mon, 3 Oct 2022 16:28:04 -0400 Subject: [PATCH] Gives enhanced permissions so that it can update dependabot pr bodies --- .github/workflows/update_dependabot_prs.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/update_dependabot_prs.yml b/.github/workflows/update_dependabot_prs.yml index a61eb1c172..bad60857d6 100644 --- a/.github/workflows/update_dependabot_prs.yml +++ b/.github/workflows/update_dependabot_prs.yml @@ -1,7 +1,7 @@ --- name: Dependency Pr Update on: - pull_request: + pull_request_target: types: [labeled, opened, reopened] jobs: @@ -9,6 +9,7 @@ jobs: name: Update Dependabot Prs if: contains(github.event.pull_request.labels.*.name, 'dependencies') && contains(github.event.pull_request.labels.*.name, 'component:ui') runs-on: ubuntu-latest + permissions: write-all steps: - name: Checkout branch