From a5296ec9d5d24f19511ca96a13461cff5a6ff212 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sat, 1 Nov 2025 16:29:27 +0100
Subject: [PATCH] workflows/bot: request read permissions for members

The nixpkgs-ci token used in CI doesn't have permissions to read the
member list of the nixpkgs-committers team, yet. Let's request this
permission and see whether that fixes the errors we get so far.
---
 .github/workflows/bot.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/bot.yml b/.github/workflows/bot.yml
index cb1df7bdb0a1..8e37cf2aabc9 100644
--- a/.github/workflows/bot.yml
+++ b/.github/workflows/bot.yml
@@ -60,8 +60,10 @@ jobs:
         with:
           app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
           private-key: ${{ secrets.NIXPKGS_CI_APP_PRIVATE_KEY }}
+          permission-administration: read
           permission-contents: write
           permission-issues: write
+          permission-members: read
           permission-pull-requests: write
 
       - name: Log current API rate limits