From c5fcc4c1ef2385b54c310abce8496933505d78fb Mon Sep 17 00:00:00 2001
From: Till Rohrmann <trohrmann@apache.org>
Date: Fri, 30 Oct 2026 13:24:57 +0100
Subject: [PATCH] Grant CLA workflow the permissions it needs

---
 .github/workflows/cla.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index 9733609cf..b528e44a2 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -7,5 +7,11 @@ on:
 
 jobs:
   CLAAssistant:
+    # the reusable workflow can't exceed the caller's permissions, so grant what it needs explicitly
+    permissions:
+      actions: write
+      contents: read
+      pull-requests: write
+      statuses: write
     uses: restatedev/restate/.github/workflows/cla.yml@main
     secrets: inherit