fix(ci): grant pull-requests write to fork label job (#2542)

2026-08-12 00:21:52 +02:00
parent 205e775d2b
commit f12bd75a40
2 changed files with 5 additions and 0 deletions
@@ -86,6 +86,10 @@ jobs:
    runs-on: ubuntu-latest
    permissions:
      issues: write
+      # issues.addLabels on a *pull request* requires the PR-scoped
+      # permission; issues: write alone 403s with "Resource not accessible
+      # by integration" (see kdlbs/kandev#2532 and siblings).
+      pull-requests: write

    steps:
      - name: Add automatic fork approval labels