From 6b424457b07fbc07b0b8a9f2962b9509304147c5 Mon Sep 17 00:00:00 2001
From: Aaron Dodson <adodson@google.com>
Date: Tue, 18 Mar 2025 09:57:23 -0700
Subject: [PATCH] chore: Update permissions on GitHub actions. (#8809)

---
 .github/workflows/assign_reviewers.yml   | 2 ++
 .github/workflows/conventional-label.yml | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/assign_reviewers.yml b/.github/workflows/assign_reviewers.yml
index 33bd9e778..f104d52d6 100644
--- a/.github/workflows/assign_reviewers.yml
+++ b/.github/workflows/assign_reviewers.yml
@@ -15,6 +15,8 @@ on:
 jobs:
   requested-reviewer:
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     steps:
       - name: Assign requested reviewer
         uses: actions/github-script@v7
diff --git a/.github/workflows/conventional-label.yml b/.github/workflows/conventional-label.yml
index 64289d987..fcd927e5c 100644
--- a/.github/workflows/conventional-label.yml
+++ b/.github/workflows/conventional-label.yml
@@ -7,6 +7,8 @@ name: conventional-release-labels
 jobs:
   label:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - uses: bcoe/conventional-release-labels@v1
         with: