From ba22005b4b68ef86ac1ee8418caefde9449d9b66 Mon Sep 17 00:00:00 2001
From: bvolovat <borisv@armosec.io>
Date: Tue, 3 Feb 2026 18:16:19 +0200
Subject: [PATCH] add permissions

---
 .github/workflows/pr-merged.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/pr-merged.yaml b/.github/workflows/pr-merged.yaml
index 2d0d5ba4b5..ddeee9206c 100644
--- a/.github/workflows/pr-merged.yaml
+++ b/.github/workflows/pr-merged.yaml
@@ -27,6 +27,12 @@ jobs:
   pr-merged:
     if: ${{ github.event.pull_request.merged == true }} ## Skip if not merged
     needs: reset-run-number
+    permissions:
+      actions: read
+      id-token: write
+      packages: write
+      contents: write
+      pull-requests: read
     uses: ./.github/workflows/incluster-comp-pr-merged.yaml
     with:
       IMAGE_NAME: quay.io/${{ github.repository_owner }}/node-agent