From 5e701d12648d5445b19fd0a3ff1b8b54b0ffef12 Mon Sep 17 00:00:00 2001
From: Shaka Bot <13107131+shaka-bot@users.noreply.github.com>
Date: Tue, 10 Dec 2024 09:54:52 -0800
Subject: [PATCH] chore: Sync common workflows (#18)

This is an automated sync of common workflows for this organization.
The upstream source is:

https://github.com/shaka-project/shaka-github-tools/commit/11128e0985c71f8708b0482e00986ce739e0224b

Co-authored-by: Shaka Bot <shaka-bot@users.noreply.github.com>
---
 .github/workflows/sync-labels.yaml   |  5 +++++
 .github/workflows/update-issues.yaml | 11 +++++++----
 2 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/sync-labels.yaml b/.github/workflows/sync-labels.yaml
index 0b679ea..ac1b6ca 100644
--- a/.github/workflows/sync-labels.yaml
+++ b/.github/workflows/sync-labels.yaml
@@ -16,6 +16,11 @@ on:
 jobs:
   sync-labels:
     runs-on: ubuntu-latest
+
+    permissions:
+      # "Write" to Issues to manage labels for the repo
+      issues: write
+
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
diff --git a/.github/workflows/update-issues.yaml b/.github/workflows/update-issues.yaml
index 6424ce1..29b6984 100644
--- a/.github/workflows/update-issues.yaml
+++ b/.github/workflows/update-issues.yaml
@@ -8,13 +8,16 @@ on:
     # Run every 30 minutes
     - cron: '*/30 * * * *'
 
-permissions:
-  issues: write
-  pull-requests: write
-
 jobs:
   update-issues:
     runs-on: ubuntu-latest
+
+    permissions:
+      # "Write" to Issues to add labels, milestones, comments, etc.
+      issues: write
+      # "Write" to Pull Requests for the same.
+      pull-requests: write
+
     steps:
       - name: Checkout code
         uses: actions/checkout@v4