Merge pull request #32 from gardar/ci/fix-permissions

fix: correct workflow triggers and writable permissions

.github/workflows/ansible-ci.yml

@@ -4,9 +4,11 @@ on:
   push:
     branches-ignore:
       - main
-  pull_request_target:
+  pull_request:
     types:
-      - '!closed'
+      - opened
+      - edited
+      - reopened
   workflow_dispatch:
 
 env:

.github/workflows/conventional-label.yml

@@ -2,13 +2,15 @@
 on:
   pull_request_target:
     types: [opened, edited, synchronize, reopened]
+permissions:
+  pull-requests: write
 name: Auto label pull request
 jobs:
   label:
     runs-on: ubuntu-latest
     steps:
       - name: "Confirm correct pull request title"
-        uses: deepakputhraya/action-pr-title@master
+        uses: mmubeen/action-pr-title@master # until PR gets merged https://github.com/deepakputhraya/action-pr-title/pull/29
         with:
           allowed_prefixes: 'feat,feature,fix,major,breaking,minor,enhancement,deprecated,removed,security,bug,bugfix,docs,packaging,test,refactor,refactoring,skip-release,skip_changelog'
 

.github/workflows/release.yml

@@ -9,9 +9,10 @@ jobs:
   release:
     if: |
       github.event.pull_request.merged &&
-      github.ref == github.event.repository.default_branch &&
       !contains(github.event.pull_request.labels.*.name, 'skip_changelog')
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v3
         with: