Update permissions based on

https://app.stepsecurity.io
analysis.
This commit is contained in:
Dan Yeaw 2022-05-02 21:23:50 -04:00
parent 5583fc10aa
commit 76a00b40bb
No known key found for this signature in database
GPG Key ID: 86B9FEF88B780F2B
2 changed files with 9 additions and 3 deletions

View File

@ -3,10 +3,13 @@ on:
pull_request_target:
types: [opened]
permissions:
contents: read
jobs:
pr-labeler:
permissions:
issues: write
pull-requests: write # for TimonVS/pr-labeler-action to add labels in PR
runs-on: ubuntu-latest
if: "!contains(github.event.head_commit.message, 'skip ci')"
steps:

View File

@ -4,11 +4,14 @@ on:
push:
branches: main
permissions:
contents: read
jobs:
update-release-draft:
permissions:
contents: write
pull-requests: read
contents: write # for release-drafter/release-drafter to create a github release
pull-requests: write # for release-drafter/release-drafter to add label to PR
runs-on: ubuntu-latest
if: "!contains(github.event.head_commit.message, 'skip ci')"
steps: