From ce4e18076702fc4dc432add269a0d07a9702e608 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Mon, 13 Apr 2026 13:11:18 +0200 Subject: [PATCH] JGC-448 - Add explicit GITHUB_TOKEN permissions to CLA workflow Made-with: Cursor --- .github/workflows/cla.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index 8c8d43dcd..9ccf3c96e 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -5,6 +5,14 @@ on: types: [created] pull_request_target: types: [opened, synchronize] + branches: + - master +# explicitly configure permissions, in case your GITHUB_TOKEN workflow permissions are set to read-only in repository settings +permissions: + actions: write + contents: write # this can be 'read' if the signatures are in remote repository + pull-requests: write + statuses: write jobs: CLAssistant: runs-on: ubuntu-latest