From 69f9bfb67b11afa9c6066ac2fa8e7d28029b1733 Mon Sep 17 00:00:00 2001
From: mkorwel <matt.korwel@gmail.com>
Date: Tue, 21 Oct 2025 20:13:05 -0700
Subject: [PATCH] fix(ci): add permissions to orchestrator workflow

---
 .github/workflows/orchestrator.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/orchestrator.yml b/.github/workflows/orchestrator.yml
index 79ea4d6444..3a4457b560 100644
--- a/.github/workflows/orchestrator.yml
+++ b/.github/workflows/orchestrator.yml
@@ -8,6 +8,12 @@ on:
       - 'release/**'
   merge_group:
 
+permissions:
+  contents: 'read'
+  packages: 'write'
+  pull-requests: 'write'
+  security-events: 'write'
+
 concurrency:
   group: '${{ github.workflow }}-${{ github.head_ref || github.ref }}'
   cancel-in-progress: true