From 295744eb36631870fca79093530fd14449e37141 Mon Sep 17 00:00:00 2001
From: Paolo Tranquilli <redsun82@github.com>
Date: Tue, 11 Nov 2025 12:00:30 +0100
Subject: [PATCH] Set permissions

---
 .github/workflows/build-ripunzip.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/build-ripunzip.yml b/.github/workflows/build-ripunzip.yml
index 8ce04c47dde..07e00bff811 100644
--- a/.github/workflows/build-ripunzip.yml
+++ b/.github/workflows/build-ripunzip.yml
@@ -17,6 +17,8 @@ on:
     paths:
       - .github/workflows/build-ripunzip.yml
 
+permissions: {}
+  
 jobs:
   versions:
     runs-on: ubuntu-slim
@@ -116,6 +118,9 @@ jobs:
   publish:
     needs: [versions, build]
     if: inputs.open-pr == 'true'
+    permissions:
+      contents: write
+      pull-requests: write
     runs-on: ubuntu-slim
     steps:
       # workaround for git-lfs not being installed yet on ubuntu-slim runners