From 7b34404e40dd88790c33b38957a442efcac7d850 Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Thu, 23 Jul 2026 11:54:59 -0400
Subject: [PATCH] fix/dependency-review-permissions (#86)

* fix: drop `pull-requests: write` and 'comment-summary-in-pr: on-failure'

* fix: update dependency-review.yml template to match callable permissions
---
 .github/workflows/callable-dependency-review.yaml | 2 --
 workflow-templates/dependency-review.yml          | 1 -
 2 files changed, 3 deletions(-)

diff --git a/.github/workflows/callable-dependency-review.yaml b/.github/workflows/callable-dependency-review.yaml
index 3845e0b..e186044 100644
--- a/.github/workflows/callable-dependency-review.yaml
+++ b/.github/workflows/callable-dependency-review.yaml
@@ -3,7 +3,6 @@ on:
   workflow_call:
 permissions:
   contents: read
-  pull-requests: write
 jobs:
   dependency-review:
     runs-on: ubuntu-latest
@@ -12,4 +11,3 @@ jobs:
       - uses: actions/dependency-review-action@v5
         with:
           fail-on-severity: high
-          comment-summary-in-pr: on-failure
diff --git a/workflow-templates/dependency-review.yml b/workflow-templates/dependency-review.yml
index 40aaa32..64eb33d 100644
--- a/workflow-templates/dependency-review.yml
+++ b/workflow-templates/dependency-review.yml
@@ -5,7 +5,6 @@ on:
 
 permissions:
   contents: read
-  pull-requests: write
 
 jobs:
   dependency-review: