From fafe3adfbdf11ade66dce4c57d9311701141cae6 Mon Sep 17 00:00:00 2001
From: Rob Patro <rob@newton>
Date: Tue, 29 Oct 2024 21:19:40 -0400
Subject: [PATCH] add permissions

---
 .github/workflows/release.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 99d011a..c56ece0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,6 +16,8 @@
 name: Release
 permissions:
   "contents": "write"
+  "pull-requests": "write"
+  "repository-projects": "write"
 
 # This task will run whenever you push a git tag that looks like a version
 # like "1.0.0", "v0.1.0-prerelease.1", "my-app/0.1.0", "releases/v1.0.0", etc.
@@ -202,7 +204,6 @@ jobs:
             ${{ env.BUILD_MANIFEST_NAME }}
   # Determines if we should publish/announce
   host:
-    permissions: write-all
     needs:
       - plan
       - build-local-artifacts