bump permissions

jamesc-grafana · jamesc-grafana · commit eae3ccce50ad · 2025-05-16T15:54:49.000+01:00
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -3,4 +3,10 @@ on:
   pull_request:
 jobs:
   zizmor:
+    permissions:
+      actions: read
+      contents: read
+      id-token: write
+      pull-requests: write
+      security-events: write
     uses: grafana/shared-workflows/.github/workflows/reusable-zizmor.yml@5a413efebe3688c4761412b1c211af0e03c0e892
