Gives enhanced permissions so that it can update dependabot pr bodies

theneedyguy · Oct 3, 2022 · aae5737 · aae5737
1 parent 5347637
commit aae5737
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/update_dependabot_prs.yml b/.github/workflows/update_dependabot_prs.yml
@@ -1,14 +1,15 @@
 ---
 name: Dependency Pr Update
 on:
-  pull_request:
+  pull_request_target:
     types: [labeled, opened, reopened]
 
 jobs:
   pr-check:
     name: Update Dependabot Prs
     if:  contains(github.event.pull_request.labels.*.name, 'dependencies') && contains(github.event.pull_request.labels.*.name, 'component:ui')
     runs-on: ubuntu-latest
+    permissions: write-all
 
     steps:
       - name: Checkout branch