From cc9e07401fce116ba7a3ebbb8cc22c1f5682164b Mon Sep 17 00:00:00 2001
From: "immich-tofu[bot]" <171590969+immich-tofu[bot]@users.noreply.github.com>
Date: Mon, 15 Sep 2025 17:59:16 +0000
Subject: [PATCH] chore: modify .github/workflows/org-zizmor.yml

---
 .github/workflows/org-zizmor.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/org-zizmor.yml b/.github/workflows/org-zizmor.yml
index cc627e3738..8510fd85b4 100644
--- a/.github/workflows/org-zizmor.yml
+++ b/.github/workflows/org-zizmor.yml
@@ -10,4 +10,6 @@ jobs:
     name: Zizmor
     uses: immich-app/devtools/.github/workflows/shared-zizmor.yml@main
     permissions:
-      pull-requests: write
+      actions: read
+      contents: read
+      security-events: write