Merge pull request devops-actions#204 from devops-actions/rajbos-patch-1

Fix token permissions

Author: rajbos

.github/workflows/auto-approve-dependabot-prs.yml

@@ -3,11 +3,14 @@ on:
   pull_request:
 
 permissions:
-  contents: write
-  pull-requests: write
+  contents: read
 
 jobs:
   dependabot:
+    permissions:
+      contents: write
+      pull-requests: write
+      actions: write
     uses: devops-actions/.github/.github/workflows/approve-dependabot-pr.yml@main
     secrets:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}