ci(cleanup): small clean ups in CI (#299)

.github/workflows/ci.yaml → .github/workflows/ci.yml

@@ -32,6 +32,10 @@ jobs:
       core_version: ${{ steps.get_core_version.outputs.core_version }}
     steps:
     - uses: actions/checkout@v4
+      with:
+        repository: ${{ github.event.pull_request.head.repo.full_name }}
+        ref: ${{ github.event.pull_request.head.ref }}
+        fetch-depth: 0
     - id: get_core_version
       run: |
         echo "core_version=$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)" >> $GITHUB_OUTPUT

.github/workflows/cryostat-test.yml

@@ -66,6 +66,9 @@ jobs:
   cryostat-test:
     runs-on: ubuntu-latest
     needs: [checkout-branch]
+    permissions:
+      statuses: write
+      pull-requests: write
     env:
       build_arch: 'amd64'
     steps:
@@ -127,7 +130,6 @@ jobs:
             repo: context.repo.repo,
             body: body
           })
-
     - name: Leave a comment on pull failure
       uses: actions/github-script@v6
       if: always() && steps.pull-image.outcome != 'success'
@@ -140,11 +142,10 @@ jobs:
             repo: context.repo.repo,
             body: body
           })
-          
     - name: Set latest commit status as ${{ job.status }}
       uses: myrotvorets/set-commit-status-action@master
       if: always()
       with:
-        sha: ${{ needs.checkout-branch.outputs.PR_head_sha}}
+        sha: ${{ needs.checkout-branch.outputs.PR_head_sha }}
         token: ${{ secrets.GITHUB_TOKEN }}
         status: ${{ job.status }}

.github/workflows/release-drafter.yml

@@ -16,6 +16,9 @@ on:
 jobs:
   update_release_draft:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      contents: write
     steps:
       # Drafts your next Release notes as Pull Requests are merged into "main"
       - uses: release-drafter/release-drafter@v5