quick plan update

Author: Dobroslav Slavenskoj

.github/workflows/digger-plan.yml

@@ -12,6 +12,12 @@ on:
 jobs:
   plan:
     runs-on: ubuntu-latest
+    permissions:    
+      contents: write      # required to merge PRs
+      id-token: write      # required for workload-identity-federation
+      pull-requests: write # required to post PR comments
+      statuses: write      # required to validate combined PR status
+
     steps:
       - uses: actions/checkout@v4
       # Unlike GCP; the role assumption is handled inline 
@@ -31,3 +37,4 @@ jobs:
         env:
           GITHUB_CONTEXT: ${{ toJson(github) }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+