From ee6169d626154ef393d11d157c925bdf7b909e6a Mon Sep 17 00:00:00 2001
From: "Andrew W. Harn" <andrew.harn@broadcom.com>
Date: Mon, 9 Sep 2024 13:08:44 -0400
Subject: [PATCH] Update workflow permissions

Signed-off-by: Andrew W. Harn <andrew.harn@broadcom.com>
---
 .github/workflows/auto-comment.yml    | 2 ++
 .github/workflows/update-project.yml  | 3 +++
 .github/workflows/zowe-cli-plugin.yml | 5 ++++-
 3 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/auto-comment.yml b/.github/workflows/auto-comment.yml
index 8f0f97b..c908aab 100644
--- a/.github/workflows/auto-comment.yml
+++ b/.github/workflows/auto-comment.yml
@@ -3,6 +3,8 @@ name: Auto Responder for New Issues
 on:
   issues:
     types: labeled
+permissions:
+  issues: write
 
 jobs:
   processLabelAction:
diff --git a/.github/workflows/update-project.yml b/.github/workflows/update-project.yml
index 6694587..d429d59 100644
--- a/.github/workflows/update-project.yml
+++ b/.github/workflows/update-project.yml
@@ -12,6 +12,9 @@ env:
   PR_STATUS_DRAFT: 'In Progress'
   PR_STATUS_READY: 'Review/QA'
 
+permissions:
+  pull-requests: write
+
 jobs:
   update-project:
     name: Move project item
diff --git a/.github/workflows/zowe-cli-plugin.yml b/.github/workflows/zowe-cli-plugin.yml
index 58f0f14..5df9070 100644
--- a/.github/workflows/zowe-cli-plugin.yml
+++ b/.github/workflows/zowe-cli-plugin.yml
@@ -77,7 +77,10 @@ jobs:
     if: github.event_name == 'push' && github.ref_protected 
     needs: test
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
     steps:
     - name: Checkout
       uses: actions/checkout@v4