retry

ethanndickson · ethanndickson · commit 50046134ec17 · 2025-02-03T07:42:38.000Z
diff --git a/.github/workflows/contrib.yaml b/.github/workflows/contrib.yaml
@@ -15,6 +15,9 @@ on:
       # For jobs that don't run on draft PRs.
       - ready_for_review
 
+permissions:
+  contents: read
+
 # Only run one instance per PR to ensure in-order execution.
 concurrency: pr-${{ github.ref }}
 
@@ -43,6 +46,8 @@ jobs:
 
   release-labels:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     # Skip tagging for draft PRs.
     if: ${{ github.event_name == 'pull_request_target' && !github.event.pull_request.draft }}
     steps:
