From 49c9136b4275de4704cf29d4f692cd052eaf10f6 Mon Sep 17 00:00:00 2001
From: Joseph Ferguson <yosifkit@gmail.com>
Date: Tue, 10 Jun 2025 11:07:50 -0700
Subject: [PATCH] Fix creating new labels

---
 .github/workflows/munge-pr.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/workflows/munge-pr.yml b/.github/workflows/munge-pr.yml
index 797a3e952..48f2b9abe 100644
--- a/.github/workflows/munge-pr.yml
+++ b/.github/workflows/munge-pr.yml
@@ -88,6 +88,14 @@ jobs:
     name: Apply Labels
     runs-on: ubuntu-latest
     needs: gather
+    permissions:
+      contents: read
+      pull-requests: write
+      # "issues: write" is now needed to create new labels
+      # https://github.com/orgs/community/discussions/156181
+      # but documentation still shows that pull-requests write should be enough 😓
+      # https://docs.github.com/en/rest/issues/labels?apiVersion=2022-11-28#create-a-label
+      issues: write
     if: fromJSON(needs.gather.outputs.images).imagesAndExternalPinsCount > 0
     steps:
       - name: Apply Labels