From b0db7057c167d23d52326f8de5c1f14f4cdfadbe Mon Sep 17 00:00:00 2001
From: Kanishka Raisania <kanishkaraisania@gmail.com>
Date: Fri, 29 Aug 2025 13:42:04 +0530
Subject: [PATCH] fix: add permissions for Approved label CI (#2719)

Signed-off-by: Kanishka Raisania <kanishkaraisania@gmail.com>
---
 .github/workflows/approved-label.yml | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/approved-label.yml b/.github/workflows/approved-label.yml
index 9fbc5ed0ae8..c9d2d1ac010 100644
--- a/.github/workflows/approved-label.yml
+++ b/.github/workflows/approved-label.yml
@@ -1,14 +1,16 @@
 on: pull_request_review
 name: Add "approved" label when approved
+permissions:
+  pull-requests: write
 jobs:
   add_label:
     name: Add "approved" label when approved
     runs-on: ubuntu-latest
     steps:
-    - name: Add "approved" label when approved
-      uses: pullreminders/label-when-approved-action@master
-      env:
-        APPROVALS: "1"
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        ADD_LABEL: "approved"
-        REMOVE_LABEL: ""
+      - name: Add "approved" label when approved
+        uses: pullreminders/label-when-approved-action@master
+        env:
+          APPROVALS: "1"
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          ADD_LABEL: "approved"
+          REMOVE_LABEL: ""