What API token permissions are required to use patches

[geoffharcourt]

Hi,

We're trying to leverage the patches in our CI pipeline, but we're getting an error that our API token isn't properly scoped. What rights does the API token need in order to be usable by socket-patch?

Thank you for your help!