From ea9e39d87c434ad5f6dfbaa083100b5f6ac168f5 Mon Sep 17 00:00:00 2001
From: Ethan <39577870+ethanndickson@users.noreply.github.com>
Date: Wed, 11 Dec 2024 15:53:08 +1100
Subject: [PATCH] fix: give cla workflow pull request write permissions
 (#15820)

When https://github.com/coder/coder/pull/15349 was added, it implicitly
set all the other permissions to none.

From
https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token
> If you specify the access for any of these permissions, all of those
that are not specified are set to none.
---
 .github/workflows/contrib.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/contrib.yaml b/.github/workflows/contrib.yaml
index 9f1b5ea82b..c317ac98c9 100644
--- a/.github/workflows/contrib.yaml
+++ b/.github/workflows/contrib.yaml
@@ -41,6 +41,8 @@ jobs:
 
   cla:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2