From f6727cc14f6ad0fb181432ce4315235c98d5fc08 Mon Sep 17 00:00:00 2001
From: mkorwel <matt.korwel@gmail.com>
Date: Tue, 21 Oct 2025 21:48:31 -0700
Subject: [PATCH] fix(workflows): Add packages:read permission and rename
 orchestrator

Adds 'packages: read' permission to the 'ci.yml' and 'e2e.yml' workflows. This is necessary to allow the jobs to download packages from the GitHub Packages registry, fixing the 403 Forbidden error during 'npm install'.

Also renames the 'orchestrator.yml' workflow from 'PR Checks' to 'Checks' for brevity.
---
 .github/workflows/ci.yml           | 1 +
 .github/workflows/e2e.yml          | 4 ++++
 .github/workflows/orchestrator.yml | 2 +-
 3 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 988d2ab725..e89edd1487 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,6 +17,7 @@ permissions:
   checks: 'write'
   contents: 'read'
   statuses: 'write'
+  packages: 'read'
 
 defaults:
   run:
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index aa379f9cb9..b68c97595d 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -1,3 +1,7 @@
+permissions:
+  contents: 'read'
+  packages: 'read'
+
 on:
   workflow_call:
     inputs:
diff --git a/.github/workflows/orchestrator.yml b/.github/workflows/orchestrator.yml
index 0ac12c6672..512c6a6ba4 100644
--- a/.github/workflows/orchestrator.yml
+++ b/.github/workflows/orchestrator.yml
@@ -1,5 +1,5 @@
 # .github/workflows/pr-checks.yml
-name: 'PR Checks'
+name: 'Checks'
 
 on:
   pull_request: