From 6813b7c134d3396c3a7268f5f240597bb3d1ff91 Mon Sep 17 00:00:00 2001
From: Hao Yao <hao.yao@intel.com>
Date: Wed, 3 Jun 2026 11:23:29 +0800
Subject: [PATCH] workflow: Fix token permission missing issue

Signed-off-by: Hao Yao <hao.yao@intel.com>
---
 .github/workflows/checkpatch-pr.yml | 5 +++++
 .github/workflows/test.yml          | 2 +-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/checkpatch-pr.yml b/.github/workflows/checkpatch-pr.yml
index a7e334c..687b1ce 100644
--- a/.github/workflows/checkpatch-pr.yml
+++ b/.github/workflows/checkpatch-pr.yml
@@ -1,9 +1,14 @@
 name: checkpatch review
 on: [pull_request]
+
+permissions: read-all
+
 jobs:
   my_review:
     name: checkpatch review
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
     - name: 'Calculate PR commits + 1'
       run: echo "PR_FETCH_DEPTH=$(( ${{ github.event.pull_request.commits }} + 1 ))" >> $GITHUB_ENV
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e066918..d65142c 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -5,7 +5,7 @@ on:
         schedule:
                 - cron: '30 1 * * *' #every day at 1:30am
 
-permissions: {}
+permissions: read-all
 
 jobs:
         Ubuntu-2404-dkms: