Reduce scope of permissions in stale workflow

Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-06-17 12:02:51 -07:00 · 2024-06-17 12:02:51 -07:00 · 531da99606
commit 531da99606
parent 27de5fea73
1 changed files with 6 additions and 3 deletions
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@ -6,13 +6,16 @@ on:
    paths:
      - '.github/workflows/stale.yml'

-permissions:
-  issues: write
-  pull-requests: write
+permissions: read-all

 jobs:
  stale:
    runs-on: ubuntu-latest
+
+    permissions:
+      issues: write
+      pull-requests: write
+
    steps:
      - uses: actions/stale@v9
        # All stale bot options: https://github.com/actions/stale#all-options