From 739ef2be5dc5a93f6abf04eeb1123c516da214c5 Mon Sep 17 00:00:00 2001
From: Kazunari Hara <kz.route21@gmail.com>
Date: Tue, 26 Dec 2023 17:57:20 +0900
Subject: [PATCH] ci: set permissions for firebase hosting preview

---
 .github/workflows/deploy-highlightjs-styles-preview.yml | 4 ++++
 .github/workflows/deploy-hoooks-preview.yml             | 4 ++++
 .github/workflows/deploy-theme-switch-preview.yml       | 4 ++++
 .github/workflows/deploy-ui-preview.yml                 | 4 ++++
 4 files changed, 16 insertions(+)

diff --git a/.github/workflows/deploy-highlightjs-styles-preview.yml b/.github/workflows/deploy-highlightjs-styles-preview.yml
index a2c218f0e..680199739 100644
--- a/.github/workflows/deploy-highlightjs-styles-preview.yml
+++ b/.github/workflows/deploy-highlightjs-styles-preview.yml
@@ -11,6 +11,10 @@ jobs:
     defaults:
       run:
         working-directory: ./packages/spindle-syntax-themes/
+    permissions:
+      checks: write
+      pull-requests: write
+      contents: read
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v4
diff --git a/.github/workflows/deploy-hoooks-preview.yml b/.github/workflows/deploy-hoooks-preview.yml
index 39ee7de4a..3067ec0f0 100644
--- a/.github/workflows/deploy-hoooks-preview.yml
+++ b/.github/workflows/deploy-hoooks-preview.yml
@@ -11,6 +11,10 @@ jobs:
     defaults:
       run:
         working-directory: ./packages/spindle-hooks/
+    permissions:
+      checks: write
+      pull-requests: write
+      contents: read
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v4
diff --git a/.github/workflows/deploy-theme-switch-preview.yml b/.github/workflows/deploy-theme-switch-preview.yml
index 90d73925e..4c6fbd900 100644
--- a/.github/workflows/deploy-theme-switch-preview.yml
+++ b/.github/workflows/deploy-theme-switch-preview.yml
@@ -11,6 +11,10 @@ jobs:
     defaults:
       run:
         working-directory: ./packages/spindle-theme-switch/
+    permissions:
+      checks: write
+      pull-requests: write
+      contents: read
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v4
diff --git a/.github/workflows/deploy-ui-preview.yml b/.github/workflows/deploy-ui-preview.yml
index 386f26e57..661741c8d 100644
--- a/.github/workflows/deploy-ui-preview.yml
+++ b/.github/workflows/deploy-ui-preview.yml
@@ -29,6 +29,10 @@ jobs:
     runs-on: ubuntu-latest
     needs: check_paths
     if: ${{ needs.check_paths.outputs.ui == 'true' }}
+    permissions:
+      checks: write
+      pull-requests: write
+      contents: read
     steps:
       - uses: actions/checkout@v3
         with: