From 2fc057a6b2ae34a822d8245039eb1901c52ba756 Mon Sep 17 00:00:00 2001
From: Justus Camp <campjustus@microsoft.com>
Date: Tue, 7 Jan 2025 16:34:51 -0800
Subject: [PATCH] try adding pr write permissions

---
 .github/workflows/openvmm-pr.yaml                   | 1 +
 flowey/flowey_hvlite/src/pipelines/checkin_gates.rs | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/openvmm-pr.yaml b/.github/workflows/openvmm-pr.yaml
index f7b976a70..be3d3b918 100644
--- a/.github/workflows/openvmm-pr.yaml
+++ b/.github/workflows/openvmm-pr.yaml
@@ -2413,6 +2413,7 @@ jobs:
     permissions:
       contents: read
       id-token: write
+      pull-requests: write
     needs:
     - job13
     if: github.event.pull_request.draft == false
diff --git a/flowey/flowey_hvlite/src/pipelines/checkin_gates.rs b/flowey/flowey_hvlite/src/pipelines/checkin_gates.rs
index d5b0ad84b..5214c9016 100644
--- a/flowey/flowey_hvlite/src/pipelines/checkin_gates.rs
+++ b/flowey/flowey_hvlite/src/pipelines/checkin_gates.rs
@@ -772,6 +772,9 @@ impl IntoPipeline for CheckinGatesCli {
                             done: ctx.new_done_handle(),
                         },
                     )
+                    .gh_grant_permissions::<flowey_lib_hvlite::_jobs::check_openvmm_hcl_size::Node>(
+                        [(GhPermission::PullRequests, GhPermissionValue::Write)],
+                    )
                     .finish();
                 all_jobs.push(job);
             }