Update zizmor perms (#1536)

otherview · otherview · commit 7a4e2a777450 · 2026-01-14T11:10:12.000Z
diff --git a/.github/workflows/on-master-commit.yaml b/.github/workflows/on-master-commit.yaml
@@ -36,6 +36,12 @@ jobs:
   scan-workflows:
     name: Scan Workflows
     uses: ./.github/workflows/scan-workflows.yaml
+    permissions:
+      contents: read
+      actions: read
+      checks: write
+      issues: write
+      pull-requests: write
     secrets:
       ZIZMOR_TOKEN: ${{ secrets.ZIZMOR_TOKEN }}
 
