fix: permission required by e2e test-system-io actions (#36478)

.github/workflows/e2e-tests-ci.yml

@@ -213,6 +213,7 @@ jobs:
       contents: read
       statuses: write
       id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress.yml
     with:
       commit_sha: "${{ needs.resolve-pr.outputs.COMMIT_SHA }}"
@@ -240,6 +241,7 @@ jobs:
       contents: read
       statuses: write
       id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright.yml
     with:
       commit_sha: "${{ needs.resolve-pr.outputs.COMMIT_SHA }}"
@@ -265,6 +267,7 @@ jobs:
       contents: read
       statuses: write
       id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress.yml
     with:
       commit_sha: "${{ needs.resolve-pr.outputs.COMMIT_SHA }}"
@@ -292,6 +295,7 @@ jobs:
       contents: read
       statuses: write
       id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright.yml
     with:
       commit_sha: "${{ needs.resolve-pr.outputs.COMMIT_SHA }}"

.github/workflows/e2e-tests-cypress.yml

@@ -214,6 +214,7 @@ jobs:
       contents: read
       statuses: write
       id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress-template-v2.yml
     with:
       test_type: full

.github/workflows/e2e-tests-on-merge.yml

@@ -66,6 +66,11 @@ jobs:
   # Enterprise Edition
   e2e-cypress:
     needs: generate-build-variables
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
@@ -85,6 +90,11 @@ jobs:
 
   e2e-playwright:
     needs: generate-build-variables
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
@@ -104,6 +114,11 @@ jobs:
   e2e-cypress-fips:
     needs: generate-build-variables
     if: needs.generate-build-variables.outputs.fips_supported == 'true'
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
@@ -125,6 +140,11 @@ jobs:
   e2e-playwright-fips:
     needs: generate-build-variables
     if: needs.generate-build-variables.outputs.fips_supported == 'true'
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}

.github/workflows/e2e-tests-on-release.yml

@@ -61,6 +61,11 @@ jobs:
   # Enterprise Edition
   e2e-cypress:
     needs: validate
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
@@ -82,6 +87,11 @@ jobs:
 
   e2e-playwright:
     needs: validate
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
@@ -103,6 +113,11 @@ jobs:
   e2e-cypress-fips:
     needs: validate
     if: needs.validate.outputs.fips_supported == 'true'
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
@@ -126,6 +141,11 @@ jobs:
   e2e-playwright-fips:
     needs: validate
     if: needs.validate.outputs.fips_supported == 'true'
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}

.github/workflows/e2e-tests-playwright.yml

@@ -205,6 +205,7 @@ jobs:
       contents: read
       statuses: write
       id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright-template-v2.yml
     with:
       workers: 8