From 1c1cfc334e6f7e9baab17a6aad6a471cb76f8028 Mon Sep 17 00:00:00 2001
From: Lukas Harbarth <lukas.harbarth@sap.com>
Date: Tue, 19 May 2026 10:12:32 +0200
Subject: [PATCH] chore(ci): add permissions for coveralls in release actions

---
 .github/workflows/release-custom-tag.yml | 2 ++
 .github/workflows/release.yml            | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/release-custom-tag.yml b/.github/workflows/release-custom-tag.yml
index 3dd19b5dee3..91a7abb674b 100644
--- a/.github/workflows/release-custom-tag.yml
+++ b/.github/workflows/release-custom-tag.yml
@@ -16,6 +16,8 @@ jobs:
   test:
     permissions:
       contents: read
+      pull-requests: write
+      checks: write
     uses: './.github/workflows/test.yml'
     with:
       reportCoverage: false
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 308d0e2f16d..cfe160bf9f0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,6 +36,8 @@ jobs:
     needs: ['build']
     permissions:
       contents: read
+      pull-requests: write
+      checks: write
     uses: './.github/workflows/test.yml'
     with:
       reportCoverage: false