From 15035302bbbf259651f1b29993ac2ce5d9a13317 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?H=C3=A9ctor?= <27339341+priethor@users.noreply.github.com>
Date: Wed, 26 Jul 2023 15:56:48 +0200
Subject: [PATCH] Enforce PR labels: change permissions to `read` (#52980)

---
 .github/workflows/enforce-pr-labels.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/enforce-pr-labels.yml b/.github/workflows/enforce-pr-labels.yml
index 14c0c601396761..6d718068b8b7df 100644
--- a/.github/workflows/enforce-pr-labels.yml
+++ b/.github/workflows/enforce-pr-labels.yml
@@ -6,7 +6,8 @@ jobs:
   type-related-labels:
     runs-on: ubuntu-latest
     permissions:
-      pull-requests: write
+      issues: read
+      pull-requests: read
     steps:
       - uses: mheap/github-action-required-labels@v5
         with:
@@ -15,5 +16,5 @@ jobs:
           labels: "[Type] Accessibility (a11y), [Type] Automated Testing, [Type] Breaking Change, [Type] Bug, [Type] Build Tooling, [Type] Code Quality, [Type] Copy, [Type] Developer Documentation, [Type] Enhancement, [Type] Experimental, [Type] Feature, [Type] New API, [Type] Task, [Type] Performance, [Type] Project Management, [Type] Security, [Type] WP Core Ticket"
           add_comment: true
           message: "## ⚠️ Type of PR label error\n To merge this PR, it requires {{ errorString }} {{ count }} label indicating the type of PR. Other labels are optional and not being checked here. \n- **Type-related labels to choose from**: {{ provided }}.\n- **Labels found**: {{ applied }}."
-          token: ${{ secrets.GUTENBERG_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}
           exit_type: success