test: update permissions on remove_label jobs (GoogleCloudPlatform#3374)

kweinmeister · web-flow · commit 98dfa8cbd9fc · 2023-08-01T10:01:19.000-07:00
diff --git a/.github/workflows/remove-label.yaml b/.github/workflows/remove-label.yaml
@@ -20,8 +20,8 @@ on:
 jobs:
   remove_label:
     permissions:
-      contents: 'read'
       id-token: 'write'
+      pull-requests: 'write'
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
