From c234a0c76042e9401970041535f6448ba6286d7e Mon Sep 17 00:00:00 2001
From: Florian Bernd <florian.bernd@elastic.co>
Date: Tue, 16 Jun 2026 10:00:02 +0200
Subject: [PATCH] fix: add explicit permissions to GitHub Actions workflows

InfoSec is changing GITHUB_TOKEN default permissions from read/write
to read-only on July 15th. Adding explicit permissions blocks to all
workflows that require write access.
---
 .github/workflows/backport.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index 2e6a6bcf..269e5c18 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -5,6 +5,10 @@ on:
       - closed
       - labeled
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   backport:
     name: Backport