Merge pull request #371 from devops-actions/update-issue-pr-tag-permissions

Add top-level permissions to issue-pr-tag workflow

Author: rajbos

.github/workflows/issue-pr-tag.yml

@@ -0,0 +1,30 @@
+name: "Issue/PR Tag"
+
+# Trigger workflow when issues or pull requests are opened/edited,
+# or when this workflow file is modified
+on:
+  issues:
+    types: [opened, edited]
+  pull_request:
+    types: [opened, edited]
+  push:
+    paths:
+      - .github/workflows/issue-pr-tag.yml
+
+permissions:
+  contents: read
+
+jobs:
+  notify:
+    uses: devops-actions/.github/.github/workflows/issue-pr-tag.yml@main
+    permissions:
+      contents: read
+      issues: write
+      pull-requests: write
+    with:
+      org_name: ${{ vars.FIXED_ORG_NAME }}
+      tag_team: ${{ vars.TAG_TEAM }}
+      issue: ${{ github.event.issue.number }}
+      pr: ${{ github.event.pull_request.number }}
+    secrets:
+      token: ${{ secrets.GITHUB_TOKEN }}