From f75ac6042ed042c329ab3d1c9cec46b4c4b81918 Mon Sep 17 00:00:00 2001 From: Nick Brassel Date: Fri, 23 Dec 2022 10:41:16 +1100 Subject: Lock down workflow permissions. (#19406) Co-authored-by: Joel Challis --- .github/workflows/labeler.yml | 4 ++++ 1 file changed, 4 insertions(+) (limited to '.github/workflows/labeler.yml') diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 3b99a8f43e..95f58ff003 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -1,5 +1,9 @@ name: "Pull Request Labeler" +permissions: + contents: read + pull-requests: write + on: pull_request_target: types: [opened, synchronize, reopened, ready_for_review, locked] -- cgit v1.2.3