Skip to content

Commit 06f6056

Browse files
authored
ci: scope down GitHub Token permissions (#1217)
* ci: scope down permissions for closed-issue-message.yml * ci: scope down permissions for close-stale-issues.yml * ci: scope down permissions for build-pull-request.yml
1 parent 0bbab84 commit 06f6056

File tree

3 files changed

+10
-0
lines changed

3 files changed

+10
-0
lines changed

.github/workflows/build-pull-request.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,9 @@ on:
88
paths:
99
- '**'
1010

11+
permissions:
12+
contents: read
13+
1114
jobs:
1215

1316
build:

.github/workflows/close-stale-issues.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,10 @@ on:
55
schedule:
66
- cron: "0 6 * * *"
77

8+
permissions:
9+
issues: write
10+
pull-requests: write
11+
812
jobs:
913
cleanup:
1014
runs-on: ubuntu-latest

.github/workflows/closed-issue-message.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,9 @@ name: Closed Issue Message
22
on:
33
issues:
44
types: [closed]
5+
permissions:
6+
issues: write
7+
58
jobs:
69
auto_comment:
710
runs-on: ubuntu-latest

0 commit comments

Comments
 (0)