Merge pull request #10350 from dmcgowan/gha-stale-permissions

Reduce scope of permissions in stale workflow
2024-06-18 05:50:28 +00:00 · 2024-06-18 05:50:28 +00:00 · 741c4bde51
commit 741c4bde51
parent e030f952ac 531da99606
1 changed files with 6 additions and 3 deletions
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@ -6,13 +6,16 @@ on:
    paths:
      - '.github/workflows/stale.yml'

-permissions:
-  issues: write
-  pull-requests: write
+permissions: read-all

 jobs:
  stale:
    runs-on: ubuntu-latest
+
+    permissions:
+      issues: write
+      pull-requests: write
+
    steps:
      - uses: actions/stale@v9
        # All stale bot options: https://github.com/actions/stale#all-options