From 9d02121c5b1552cd4bfdf9e3fe7c889cdc91777f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luk=C3=A1=C5=A1=20Kucharczyk?= <lukas@kucharczyk.xyz>
Date: Sun, 14 Jun 2026 16:27:58 +0200
Subject: [PATCH] Grant pull-requests: write to staging deploy job

The github-script PR comment step needs this permission; without it
the GITHUB_TOKEN gets Resource not accessible by integration.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .github/workflows/staging.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/staging.yml b/.github/workflows/staging.yml
index 144528f..3eb47cd 100644
--- a/.github/workflows/staging.yml
+++ b/.github/workflows/staging.yml
@@ -13,6 +13,8 @@ jobs:
   deploy:
     if: github.event_name == 'push'
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     env:
       BRANCH: ${{ github.ref_name }}
       FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}