permissions

Author: MoteHue

.github/workflows/amphora-image-build.yml

@@ -3,7 +3,7 @@
 name: Update overcloud host image tags
 
 on:
-  workflow_dispatch:
+  workflow_call:
     inputs:
       rocky9_tag:
         description: Overcloud host image tag for Rocky 9
@@ -16,7 +16,9 @@ jobs:
   propose_overcloud_host_image_tag_updates:
     if: github.repository == 'stackhpc/stackhpc-kayobe-config'
     runs-on: ubuntu-22.04
-    permissions: {}
+    permissions:
+      contents: write
+      pull-requests: write
     name: Update overcloud host image tags
     steps:
       - name: Checkout

.github/workflows/overcloud-host-image-build.yml

@@ -44,7 +44,7 @@ jobs:
     runs-on: ${{ needs.runner-selection.outputs.runner_name_image_build }}
     needs:
       - runner-selection
-    permissions: {}
+    permissions: write-all
     steps:
       - name: Validate inputs
         run: |