chore: update repository templates to ory/meta@d4cb957

Author: ory-bot

.github/workflows/licenses.yml

@@ -12,21 +12,35 @@ on:
       - master
 
 jobs:
-  licenses:
+  check:
     name: License compliance
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Install script
-        uses: ory/ci/licenses/setup@master
+        uses: ory/ci/licenses/setup@35878b67f40c377bcb14dce2c26cf92e53586b4a # master
         with:
-          token: ${{ secrets.ORY_BOT_PAT || secrets.GITHUB_TOKEN }}
+          token: ${{ github.token }}
       - name: Check licenses
-        uses: ory/ci/licenses/check@master
+        uses: ory/ci/licenses/check@35878b67f40c377bcb14dce2c26cf92e53586b4a # master
+
+  write:
+    name: Update license overview
+    if:
+      ${{ github.event_name == 'push' && (github.ref == 'refs/heads/main' ||
+      github.ref == 'refs/heads/master' || github.ref == 'refs/heads/v3') }}
+    needs: check
+    permissions:
+      contents: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Install script
+        uses: ory/ci/licenses/setup@35878b67f40c377bcb14dce2c26cf92e53586b4a # master
+        with:
+          token: ${{ secrets.ORY_BOT_PAT || github.token }}
       - name: Write, commit, push licenses
-        uses: ory/ci/licenses/write@master
-        if:
-          ${{ github.ref == 'refs/heads/main' || github.ref ==
-          'refs/heads/master' || github.ref == 'refs/heads/v3' }}
+        uses: ory/ci/licenses/write@35878b67f40c377bcb14dce2c26cf92e53586b4a # master
         with:
           author-email:
             ${{ secrets.ORY_BOT_PAT &&