From a66e1801df668d71fe95d19b54671d15b2d17647 Mon Sep 17 00:00:00 2001
From: aconite33 <aconite33@users.noreply.github.com>
Date: Fri, 12 Jun 2026 17:09:31 -0600
Subject: [PATCH] Add permissions block to CLA caller workflow

Reusable workflows inherit permissions from the caller, so the caller
must declare them. Without this the workflow fails with a silent
"workflow file issue" error.
---
 .github/workflows/cla.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index 1c0a1b7c82..089210cefe 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -5,6 +5,10 @@ on:
   pull_request_target:
     types: [opened, closed, synchronize]
 
+permissions:
+  pull-requests: write
+  statuses: write
+
 jobs:
   cla:
     uses: blacklanternsecurity/.github/.github/workflows/cla-reusable.yml@main