From 829eb67db9d0db0c7c70d6ce9f917acdbbbfd000 Mon Sep 17 00:00:00 2001
From: Ryan Wagner <ryan.wagner@pantheon.io>
Date: Wed, 24 Jan 2024 17:45:59 -0500
Subject: [PATCH] [BUGS-6560]: Adds appropriate permissions management.

---
 .github/workflows/create-branch-on-tag.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/create-branch-on-tag.yml b/.github/workflows/create-branch-on-tag.yml
index 11aa4bf1..9e01697f 100644
--- a/.github/workflows/create-branch-on-tag.yml
+++ b/.github/workflows/create-branch-on-tag.yml
@@ -4,6 +4,9 @@ on:
   push:
     tags:
       - '*'
+permissions:
+  pull-requests: read
+  contents: write
 
 jobs:
   create-branch: