From 8de881b67a90b80876983d31c571a06d43715ac6 Mon Sep 17 00:00:00 2001
From: Antoine du Hamel <duhamelantoine1995@gmail.com>
Date: Mon, 10 Aug 2026 10:40:45 +0200
Subject: [PATCH] tools: fix GITHUB_TOKEN permissions for CQ workflow

Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
---
 .github/workflows/commit-queue.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/commit-queue.yml b/.github/workflows/commit-queue.yml
index 641fe2a7174..a4d61132dee 100644
--- a/.github/workflows/commit-queue.yml
+++ b/.github/workflows/commit-queue.yml
@@ -59,7 +59,10 @@ jobs:
     needs: get_candidate_prs
     if: needs.get_candidate_prs.outputs.candidates != ''
     permissions:
+      checks: read
+      contents: read
       pull-requests: read
+      statuses: read
     runs-on: ubuntu-slim
     steps:
       # Install dependencies