summaryrefslogtreecommitdiffstats
path: root/.github/workflows/labeler.yml
diff options
context:
space:
mode:
authorNick Brassel <nick@tzarc.org>2022-12-23 10:41:16 +1100
committerGitHub <noreply@github.com>2022-12-23 10:41:16 +1100
commitf75ac6042ed042c329ab3d1c9cec46b4c4b81918 (patch)
tree4b5c834d84bb7752e459243a2ec5893a64f3f5a9 /.github/workflows/labeler.yml
parentb8a9de206d38f0e047c2f07bca398d6fe53b76a9 (diff)
Lock down workflow permissions. (#19406)
Co-authored-by: Joel Challis <git@zvecr.com>
Diffstat (limited to '.github/workflows/labeler.yml')
-rw-r--r--.github/workflows/labeler.yml4
1 files changed, 4 insertions, 0 deletions
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 3b99a8f43e..95f58ff003 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -1,5 +1,9 @@
name: "Pull Request Labeler"
+permissions:
+ contents: read
+ pull-requests: write
+
on:
pull_request_target:
types: [opened, synchronize, reopened, ready_for_review, locked]