From 9ef4498d5c486aeccc49041678ba81970a77f0a7 Mon Sep 17 00:00:00 2001
From: Anton Volkov <antonwolfy@gmail.com>
Date: Tue, 16 Dec 2025 10:20:03 +0100
Subject: [PATCH] Add token permissions to workflow with Autoupdate pre-commit

---
 .github/workflows/pre-commit-autoupdate.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/pre-commit-autoupdate.yml b/.github/workflows/pre-commit-autoupdate.yml
index cd8530b9c2..463d1586ae 100644
--- a/.github/workflows/pre-commit-autoupdate.yml
+++ b/.github/workflows/pre-commit-autoupdate.yml
@@ -10,6 +10,8 @@ on:
     - cron: '28 2 * * 6' # Saturday at 02:28 UTC
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
   autoupdate:
     name: Autoupdate
@@ -17,6 +19,11 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
 
+    permissions:
+      # Needed to create a PR with autoupdate changes
+      contents: write
+      pull-requests: write
+
     steps:
       - name: Checkout DPNP repo
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4.2.2