Merge pull request #5106 from nrb/github-actions-fix

Add permissions to the GitHub Actions token

Author: cblecker

.github/workflows/dependabot.yml

@@ -13,6 +13,10 @@ on:
           description: 'Run code generation manually from GH CLI'
           required: true
           default: 'Make Generate'
+
+permissions:
+  contents: write # Allow actions to update dependabot PRs
+
 jobs:
   build:
     name: Build

.github/workflows/pr-verify.yml

@@ -4,6 +4,9 @@ on:
   pull_request_target:
     types: [opened, edited, synchronize, reopened]
 
+permissions:
+  checks: write
+
 jobs:
   verify:
     runs-on: ubuntu-latest