more ci

Author: ejfine

template/.github/workflows/ci.yaml.jinja

@@ -59,6 +59,7 @@ jobs:
     permissions:
       id-token: write # needed to assume OIDC roles (e.g. for downloading from CodeArtifact)
       contents: write # needed for mutex
+      pull-requests: write # needed to potentially post the preview on the PR as a comment
     with:
       AWS_REGION: {% endraw %}{{ aws_region_for_stack }}{% raw %}
       PULUMI_STACK_NAME: {% endraw %}{{ pulumi_stack_name }}{% raw %}