From 70204ad91fa99cbfde3340f9ae1e88f749c2bb61 Mon Sep 17 00:00:00 2001
From: Yurii Motov <yurii.motov.monte@gmail.com>
Date: Mon, 20 Apr 2026 08:54:50 +0200
Subject: [PATCH] Fix workflow level permissions in `smokechow` and
 `detect-conflicts`

---
 .github/workflows/detect-conflicts.yml | 2 ++
 .github/workflows/smokeshow.yml        | 5 +++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/detect-conflicts.yml b/.github/workflows/detect-conflicts.yml
index 68448c6d0..38d526bd9 100644
--- a/.github/workflows/detect-conflicts.yml
+++ b/.github/workflows/detect-conflicts.yml
@@ -4,6 +4,8 @@ on:
   pull_request_target: # zizmor: ignore[dangerous-triggers]
     types: [synchronize]
 
+permissions: {}
+
 jobs:
   main:
     permissions:
diff --git a/.github/workflows/smokeshow.yml b/.github/workflows/smokeshow.yml
index f2c7e3692..17ba8d80c 100644
--- a/.github/workflows/smokeshow.yml
+++ b/.github/workflows/smokeshow.yml
@@ -5,12 +5,13 @@ on:
     workflows: [Test]
     types: [completed]
 
-permissions:
-  statuses: write
+permissions: {}
 
 jobs:
   smokeshow:
     runs-on: ubuntu-latest
+    permissions:
+      statuses: write
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
-- 
2.47.3