From c673ef363ba73ad076680d71ef54bd549582d41f Mon Sep 17 00:00:00 2001
From: Jakob Lichterfeld <jakob-lichterfeld@gmx.de>
Date: Wed, 13 Nov 2024 09:23:49 +0100
Subject: [PATCH] ci(fix): correct permissions for flake.lock updates

---
 .github/workflows/update-flack-lock.yml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/update-flack-lock.yml b/.github/workflows/update-flack-lock.yml
index f624cf87..1d410a75 100644
--- a/.github/workflows/update-flack-lock.yml
+++ b/.github/workflows/update-flack-lock.yml
@@ -1,25 +1,32 @@
 ---
-name: update-flake-lock
+name: Update flake.lock
 on:
   workflow_dispatch:
   schedule:
     # runs weekly on Saturday at 00:00 UTC time
     - cron: "0 0 * * 6"
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   lockfile:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
       - name: Install Nix
         uses: cachix/install-nix-action@08dcb3a5e62fa31e2da3d490afc4176ef55ecd72 #v30
         with:
           github_access_token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Update flake.lock
         id: update
         uses: DeterminateSystems/update-flake-lock@a2bbe0274e3a0c4194390a1e445f734c597ebc37 #v24
         with:
           pr-title: "Update flake.lock"
+
       - name: Print PR number
         run: echo Pull request number is ${{ steps.update.outputs.pull-request-number }}.