Add workflow permission back and try refining job_workflow_ref (DataDog#10191)

sarahchen6 · web-flow · commit 1ad22e707ac5 · 2025-12-12T16:48:41.000+01:00
* Add workflow permission back
* Add refs/heads/ to job workflow ref
diff --git a/.github/chainguard/self.pin-system-tests.create-pr.sts.yaml b/.github/chainguard/self.pin-system-tests.create-pr.sts.yaml
@@ -5,8 +5,9 @@ subject_pattern: repo:DataDog/dd-trace-java:ref:refs/heads/.+
 claim_pattern:
   event_name: (push|workflow_dispatch)
   ref: refs/heads/.+
-  job_workflow_ref: DataDog/dd-trace-java/\.github/workflows/pin-system-tests\.yaml@.+
+  job_workflow_ref: DataDog/dd-trace-java/\.github/workflows/pin-system-tests\.yaml@refs/heads/.+
 
 permissions:
   contents: write
   pull_requests: write
+  workflows: write
