From 23608f3fa77884791abb894080f9d84ee06f568f Mon Sep 17 00:00:00 2001
From: ddelange <14880945+ddelange@users.noreply.github.com>
Date: Thu, 11 Aug 2022 09:34:52 +0200
Subject: [PATCH] Bar permissions and allow forks to run in base scope (#6)

* Test permissions

* Add back pull_request

* Use full SHA
---
 .github/workflows/pr_diff.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/pr_diff.yaml b/.github/workflows/pr_diff.yaml
index 43ffa18..2fe3939 100644
--- a/.github/workflows/pr_diff.yaml
+++ b/.github/workflows/pr_diff.yaml
@@ -1,6 +1,10 @@
 name: PR Diff for Helm chart
 on:
   pull_request:
+  pull_request_target:
+  
+permissions:
+  pull-requests: write
 
 jobs:
   diff:
@@ -34,7 +38,7 @@ jobs:
           echo 'HELM_DIFF<<EOF' >> $GITHUB_ENV
           echo "$(diff -ur before after)" >> $GITHUB_ENV
           echo 'EOF' >> $GITHUB_ENV
-      - uses: marocchino/sticky-pull-request-comment@v2
+      - uses: marocchino/sticky-pull-request-comment@39c5b5dc7717447d0cba270cd115037d32d28443
         with:
           message: |
             Running a `helm template` smoketest on this branch results in the following diff against `${{ github.base_ref }}`: