chore: update release drafter permissions (#578)

kzantow · web-flow · commit 0d444ed77d83 · 2026-01-21T13:00:56.000-05:00
Signed-off-by: Keith Zantow &lt;kzantow@gmail.com&gt;
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
@@ -5,11 +5,15 @@ on:
     branches:
       - main
 
-permissions: {}
+permissions:
+  contents: read
 
 jobs:
   update_release_draft:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # write permission is required to create a github release
+      pull-requests: write # write permission is required for autolabeler
     steps:
       - name: Draft release notes
         uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6.1.0
diff --git a/.github/workflows/tag-release.yml b/.github/workflows/tag-release.yml
@@ -9,6 +9,8 @@ permissions: {}
 jobs:
   actions-tagger:
     runs-on: ubuntu-latest
+    permissions: # actions-tagger needs content read and write to create tags
+      contents: write
     steps:
       - uses: Actions-R-Us/actions-tagger@330ddfac760021349fef7ff62b372f2f691c20fb # v2.0.3
         with:
