From 70ca305e165d418c499aac1d54a16997f8f2b061 Mon Sep 17 00:00:00 2001
From: Cuong-Tran <cuongtran.tm@gmail.com>
Date: Mon, 14 Apr 2025 17:22:56 +0700
Subject: [PATCH] Fix workflows permission & website deploy trigger

---
 .github/workflows/build_preview.yml        | 3 +++
 .github/workflows/build_release.yml        | 3 +++
 .github/workflows/delete_merged_branch.yml | 3 +++
 .github/workflows/issue_moderator.yml      | 3 +++
 .github/workflows/pr_label.yml             | 3 +++
 .github/workflows/update_website.yml       | 2 +-
 6 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build_preview.yml b/.github/workflows/build_preview.yml
index 80fd6d582..0f8485dd7 100644
--- a/.github/workflows/build_preview.yml
+++ b/.github/workflows/build_preview.yml
@@ -19,6 +19,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: write
+
 jobs:
   prepare-build:
     runs-on: 'ubuntu-24.04'
diff --git a/.github/workflows/build_release.yml b/.github/workflows/build_release.yml
index 1a59e825b..ffcee6c70 100644
--- a/.github/workflows/build_release.yml
+++ b/.github/workflows/build_release.yml
@@ -10,6 +10,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: write
+
 jobs:
   prepare-build:
     runs-on: 'ubuntu-24.04'
diff --git a/.github/workflows/delete_merged_branch.yml b/.github/workflows/delete_merged_branch.yml
index 7ae7eec08..2320d6098 100644
--- a/.github/workflows/delete_merged_branch.yml
+++ b/.github/workflows/delete_merged_branch.yml
@@ -4,6 +4,9 @@ on:
   pull_request:
     types: [closed]
 
+permissions:
+  contents: write
+
 jobs:
   delete_merged_branch:
     runs-on: 'ubuntu-24.04'
diff --git a/.github/workflows/issue_moderator.yml b/.github/workflows/issue_moderator.yml
index 6af253ac6..423368dfb 100644
--- a/.github/workflows/issue_moderator.yml
+++ b/.github/workflows/issue_moderator.yml
@@ -6,6 +6,9 @@ on:
   issue_comment:
     types: [created]
 
+permissions:
+  contents: write
+
 jobs:
   moderate:
     runs-on: 'ubuntu-24.04'
diff --git a/.github/workflows/pr_label.yml b/.github/workflows/pr_label.yml
index 93ba0ea61..ea29e3f6d 100644
--- a/.github/workflows/pr_label.yml
+++ b/.github/workflows/pr_label.yml
@@ -4,6 +4,9 @@ on:
   pull_request:
     types: [opened]
 
+permissions:
+  contents: write
+
 jobs:
   label_pr:
     runs-on: 'ubuntu-24.04'
diff --git a/.github/workflows/update_website.yml b/.github/workflows/update_website.yml
index 153c402fa..b138fe604 100644
--- a/.github/workflows/update_website.yml
+++ b/.github/workflows/update_website.yml
@@ -15,7 +15,7 @@ jobs:
       - name: Update website on release
         uses: benc-uk/workflow-dispatch@e2e5e9a103e331dad343f381a29e654aea3cf8fc # v1.2.4
         with:
-          workflow: deploy
+          workflow: Deploy
           repo: komikku-app/komikku-app.github.io
           ref: "refs/heads/main"
           token: "${{ secrets.BOT_PAT }}"