[Security] Token permissions no. 2

2024-12-22 00:33:41 +01:00
parent b86eac20ea
commit f29d4db31e
10 changed files with 36 additions and 27 deletions
--- a/.github/workflows/auto-labeler.yml
+++ b/.github/workflows/auto-labeler.yml
@@ -3,13 +3,13 @@ on:
  pull_request_target:
    types: [opened, synchronize]

-permissions:
-  contents: read
-  pull-requests: write
+permissions: read-all

 jobs:
  labeler:
    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2