[Security] Token permissions no. 2

2024-12-22 00:33:41 +01:00
parent b86eac20ea
commit f29d4db31e
10 changed files with 36 additions and 27 deletions
--- a/.github/workflows/sync_files.yml
+++ b/.github/workflows/sync_files.yml
@@ -9,13 +9,14 @@ on:
      - "src/main/resources/messages_*.properties"
      - "scripts/ignore_translation.toml"

-permissions:
-  contents: write
-  pull-requests: write
+permissions: read-all

 jobs:
  sync-readme:
    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2