From f04b52773ef669408150fde3dace911755da8149 Mon Sep 17 00:00:00 2001
From: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
Date: Fri, 6 Mar 2026 12:51:26 +0100
Subject: [PATCH] ci: add statuses write permission to prombench workflow

The workflow posts commit status updates via the GitHub API, but
the GITHUB_TOKEN only had 'contents: read', causing HTTP 403 on
all statuses API calls.

Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
---
 .github/workflows/prombench.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/prombench.yml b/.github/workflows/prombench.yml
index 5eb9becc0a..34bea41d54 100644
--- a/.github/workflows/prombench.yml
+++ b/.github/workflows/prombench.yml
@@ -24,6 +24,8 @@ jobs:
   benchmark_start:
     name: Benchmark Start
     if: github.event.action == 'prombench_start'
+    permissions:
+      statuses: write
     runs-on: ubuntu-latest
     steps:
       - name: Update status to pending
@@ -59,6 +61,8 @@ jobs:
   benchmark_cancel:
     name: Benchmark Cancel
     if: github.event.action == 'prombench_stop'
+    permissions:
+      statuses: write
     runs-on: ubuntu-latest
     steps:
       - name: Update status to pending
@@ -94,6 +98,8 @@ jobs:
   benchmark_restart:
     name: Benchmark Restart
     if: github.event.action == 'prombench_restart'
+    permissions:
+      statuses: write
     runs-on: ubuntu-latest
     steps:
       - name: Update status to pending