Merge pull request containerd#10350 from dmcgowan/gha-stale-permissions

Reduce scope of permissions in stale workflow
thaJeztah · Jun 18, 2024 · 741c4bd · 741c4bd
2 parents e030f95 + 531da99
commit 741c4bd
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
@@ -6,13 +6,16 @@ on:
     paths:
       - '.github/workflows/stale.yml'
 
-permissions:
-  issues: write
-  pull-requests: write
+permissions: read-all
 
 jobs:
   stale:
     runs-on: ubuntu-latest
+
+    permissions:
+      issues: write
+      pull-requests: write
+
     steps:
       - uses: actions/stale@v9
         # All stale bot options: https://github.com/actions/stale#all-options