From 6038f482413c70df89c8e7ea5e8c233393f51fcd Mon Sep 17 00:00:00 2001
From: mkorwel <matt.korwel@gmail.com>
Date: Tue, 21 Oct 2025 20:20:02 -0700
Subject: [PATCH] fix(ci): add all required read permissions to orchestrator

---
 .github/workflows/orchestrator.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/workflows/orchestrator.yml b/.github/workflows/orchestrator.yml
index 9317eaf0da..40a026f5ca 100644
--- a/.github/workflows/orchestrator.yml
+++ b/.github/workflows/orchestrator.yml
@@ -16,6 +16,14 @@ permissions:
   checks: 'write'
   statuses: 'write'
   actions: 'read'
+  attestations: 'read'
+  deployments: 'read'
+  discussions: 'read'
+  issues: 'read'
+  models: 'read'
+  pages: 'read'
+  repository-projects: 'read'
+  id-token: 'read'
 
 concurrency:
   group: '${{ github.workflow }}-${{ github.head_ref || github.ref }}'