Allow safety tag removal from GHA.

This was broken by a recent lockdown of GHA permissions. PiperOrigin-RevId: 543531770
1 year ago · ea51496f6e
parent 7564894af7
commit ea51496f6e
1 changed files with 3 additions and 0 deletions
--- a/.github/workflows/test_runner.yml
+++ b/.github/workflows/test_runner.yml
@ -93,9 +93,12 @@ jobs:
    needs: [check-tag]
    if: github.event.action == 'labeled'
    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
    steps:
      - uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0 # v1.3.0
        with:
+          fail_on_error: true
          labels: ':a: safe for tests'

  # Note: this pattern of passing the head sha is vulnerable to PWN requests for