update workflows

.github/workflows/publish.yml

@@ -1,15 +1,21 @@
 name: brew pr-pull
+
 on:
   pull_request_target:
     types:
       - labeled
+
 jobs:
   pr-pull:
+    if: contains(github.event.pull_request.labels.*.name, 'pr-pull')
     strategy:
       matrix:
         os: [macos-13, macos-14]
-    if: contains(github.event.pull_request.labels.*.name, 'pr-pull')
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: write
+      packages: write
+      pull-requests: write
     steps:
       - name: Set up Homebrew
         uses: Homebrew/actions/setup-homebrew@master
@@ -20,6 +26,8 @@ jobs:
       - name: Pull bottles
         env:
           HOMEBREW_GITHUB_API_TOKEN: ${{ github.token }}
+          HOMEBREW_GITHUB_PACKAGES_TOKEN: ${{ github.token }}
+          HOMEBREW_GITHUB_PACKAGES_USER: ${{ github.repository_owner }}
           PULL_REQUEST: ${{ github.event.pull_request.number }}
         run: brew pr-pull --debug --tap="$GITHUB_REPOSITORY" "$PULL_REQUEST"