From 656bf2c15a2d745cc6d917d6a4d25bf91f13dbe1 Mon Sep 17 00:00:00 2001 From: Steven Welch Date: Mon, 14 Sep 2026 16:05:45 -0600 Subject: [PATCH 1/2] ci: permit release-please pull requests --- gh-workflow-permissions.tf | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 gh-workflow-permissions.tf diff --git a/gh-workflow-permissions.tf b/gh-workflow-permissions.tf new file mode 100644 index 0000000..7584578 --- /dev/null +++ b/gh-workflow-permissions.tf @@ -0,0 +1,8 @@ +# Release Please uses the repository-scoped GITHUB_TOKEN to create its release +# pull request after successful main CI. Keep the default token read-only; the +# release workflow requests only the write scopes it needs at job level. +resource "github_workflow_repository_permissions" "release_automation" { + repository = github_repository.repositories["terraform-libvirt-domain"].name + default_workflow_permissions = "read" + can_approve_pull_request_reviews = true +} From 39a5ed4b6320d884fee7cac6f03e076b64cd8caf Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 14 Sep 2026 22:07:18 +0000 Subject: [PATCH 2/2] chore: apply pre-commit fixes --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index d6c70cb..1718387 100644 --- a/README.md +++ b/README.md @@ -42,6 +42,7 @@ No modules. | [github_team.developers](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/team) | resource | | [github_team_membership.admins_xnoto](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/team_membership) | resource | | [github_team_repository.admins](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/team_repository) | resource | +| [github_workflow_repository_permissions.release_automation](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/workflow_repository_permissions) | resource | | [github_app.chart_updater](https://registry.terraform.io/providers/integrations/github/latest/docs/data-sources/app) | data source | | [sops_file.secret_vars](https://registry.terraform.io/providers/carlpett/sops/latest/docs/data-sources/file) | data source |