build: add PR write permissions to label job (#2450)

GoogleCloudPlatform · Nov 30, 2021 · a13a50a · a13a50a
1 parent 2dd466c
commit a13a50a
Show file tree

Hide file tree

Showing 7 changed files with 28 additions and 21 deletions.
diff --git a/.github/workflows/ci.yaml.template b/.github/workflows/ci.yaml.template
@@ -17,7 +17,8 @@ jobs:
     if: {% raw %}${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}{% endraw %}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/[email protected]'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: {% raw %}${{ github.event_name == 'schedule'}}{% endraw %}

diff --git a/.github/workflows/composer-functions-composer-storage-trigger.yaml b/.github/workflows/composer-functions-composer-storage-trigger.yaml
@@ -17,7 +17,8 @@ jobs:
     if: ${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/[email protected]'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: ${{ github.event_name == 'schedule'}}

diff --git a/.github/workflows/composer.yaml b/.github/workflows/composer.yaml
@@ -17,7 +17,8 @@ jobs:
     if: ${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/[email protected]'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: ${{ github.event_name == 'schedule'}}

diff --git a/.github/workflows/healthcare-datasets.yaml b/.github/workflows/healthcare-datasets.yaml
@@ -17,7 +17,8 @@ jobs:
     if: ${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/[email protected]'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: ${{ github.event_name == 'schedule'}}

diff --git a/.github/workflows/healthcare-dicom.yaml b/.github/workflows/healthcare-dicom.yaml
@@ -17,7 +17,8 @@ jobs:
     if: ${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/[email protected]'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: ${{ github.event_name == 'schedule'}}

diff --git a/.github/workflows/healthcare-fhir.yaml b/.github/workflows/healthcare-fhir.yaml
@@ -17,7 +17,8 @@ jobs:
     if: ${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/[email protected]'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: ${{ github.event_name == 'schedule'}}

diff --git a/.github/workflows/healthcare-hl7v2.yaml b/.github/workflows/healthcare-hl7v2.yaml
@@ -17,7 +17,8 @@ jobs:
     if: ${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/[email protected]'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: ${{ github.event_name == 'schedule'}}