From 44927c44e99ef8cc4b55c4ce3456eb11224a2af8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9sar=20Arroba?=
 <19954079+cesararroba@users.noreply.github.com>
Date: Mon, 23 Jun 2025 11:49:48 +0200
Subject: [PATCH] chore(gha): add permissions on check-changelog workflow
 (#8080)

---
 .github/workflows/pull-request-check-changelog.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/pull-request-check-changelog.yml b/.github/workflows/pull-request-check-changelog.yml
index 19237b9c63..d983c5ad35 100644
--- a/.github/workflows/pull-request-check-changelog.yml
+++ b/.github/workflows/pull-request-check-changelog.yml
@@ -9,6 +9,8 @@ jobs:
     if: contains(github.event.pull_request.labels.*.name, 'no-changelog') == false
     runs-on: ubuntu-latest
     permissions:
+      id-token: write
+      contents: read
       pull-requests: write
     env:
       MONITORED_FOLDERS: "api ui prowler"