From f942faee4b65ee372af5b4cf1bf47ccdcf774f4c Mon Sep 17 00:00:00 2001
From: Philip Meier <github.pmeier@posteo.de>
Date: Mon, 22 Jan 2024 15:06:52 +0100
Subject: [PATCH] add write permissions for GHA bot (#288)

---
 .github/workflows/update-docker-requirements.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/update-docker-requirements.yml b/.github/workflows/update-docker-requirements.yml
index a4010967..9f9b50d2 100644
--- a/.github/workflows/update-docker-requirements.yml
+++ b/.github/workflows/update-docker-requirements.yml
@@ -8,6 +8,10 @@ on:
       - "requirements-docker.lock"
   workflow_dispatch:
 
+permissions:
+  pull-requests: write
+  contents: write
+
 jobs:
   update:
     runs-on: ubuntu-latest
@@ -47,9 +51,11 @@ jobs:
           commit-message: update requirements-docker.lock
           branch: update-docker-requirements
           branch-suffix: timestamp
+          base: ${{ github.head_ref || github.ref_name }}
           title: Update requirements-docker.lock
+          # prettier-ignore
           body:
-            https://github.com/{{ github.repository }}/actions/runs/{{ github.run_id }}
+            https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
           assignees: ${{ github.actor }}
 
       - name: Show diff