From 75176bd865021aede1465403212001017cb6ee09 Mon Sep 17 00:00:00 2001
From: Daniel Sil <daniel.sil@kiwi.com>
Date: Thu, 28 Mar 2024 16:38:13 +0100
Subject: [PATCH] ci: fine grain write permissions in storybook job

---
 .github/workflows/storybook.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/storybook.yml b/.github/workflows/storybook.yml
index 850efadca5..4cbd3aef2d 100644
--- a/.github/workflows/storybook.yml
+++ b/.github/workflows/storybook.yml
@@ -16,7 +16,9 @@ env: # Set environment variables for every job and step in this workflow
 jobs:
   deploy:
     runs-on: ubuntu-latest
-    permissions: write-all # for dependabot
+    permissions:
+      pull-requests: write # for dependabot
+      pages: write # for deploying to GitHub Pages on master
     steps:
       - name: Checkout
         uses: actions/checkout@v4