github: workflow: another permissions fix - inherit

Signed-off-by: Jaroslav Kysela <perex@perex.cz>

diff --git a/.github/workflows/label-automation.yml b/.github/workflows/label-automation.yml
index d6ee04c8c6606b71e472671d54dc74df151689f0..783a33431adec9306f55ccf190ac2e64c23d4502 100644 (file)
--- a/.github/workflows/label-automation.yml
+++ b/.github/workflows/label-automation.yml
@@ -11,13 +11,13 @@ on:
   pull_request_target:
     types: [labeled, unlabeled]
 
-permissions:
-  contents: read
-  pull-requests: write
-  issues: write
-
 jobs:
   handle-label:
     uses: ./.github/workflows/reusable-label-commenter.yml
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
     with:
       config-path: '.github/label-descriptions.yml'
+    secrets: inherit

diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml
index dc9f8d4291b648682d1ac5ffb85773dc41b5f2da..bbce7031627ef161c76c18dca3dac146ad554d77 100644 (file)
--- a/.github/workflows/pr-validation.yml
+++ b/.github/workflows/pr-validation.yml
@@ -15,15 +15,15 @@ on:
         required: true
         type: number
 
-permissions:
-  contents: read
-  pull-requests: write
-  issues: write
-
 jobs:
   validate-commits:
     uses: ./.github/workflows/reusable-sob-validator.yml
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
     with:
       config-path: '.github/label-descriptions.yml'
       sob-label: 'signed off by'
       pr-number: ${{ github.event_name == 'workflow_dispatch' && format('{0}', inputs.pr_number) || '' }}
+    secrets: inherit