Permissions

Ludy87 · Dec 30, 2024 · 293b286 · 293b286
1 parent 64623d7
commit 293b286
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 1 deletion.
diff --git a/.github/workflows/actions-labeler.yaml b/.github/workflows/actions-labeler.yaml
@@ -6,12 +6,13 @@ on:
 
 permissions:
   contents: read
-  pull-requests: write
 
 jobs:
   action:
     if: ${{ github.event.pull_request.user.login != 'dependabot[bot]' }}
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4

diff --git a/.github/workflows/ghaction-github-labeler.yaml b/.github/workflows/ghaction-github-labeler.yaml
@@ -6,11 +6,16 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read
+
 jobs:
   labeler:
     name: Labeler
     if: ${{ github.event.pull_request.user.login != 'dependabot[bot]' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Check out the repository
         uses: actions/checkout@v4

diff --git a/.github/workflows/issue-auto.yaml b/.github/workflows/issue-auto.yaml
@@ -4,9 +4,14 @@ on:
   issues:
     types: [opened]
 
+permissions:
+  contents: read
+
 jobs:
   titlePrefixCheck:
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     steps:
       - if: contains(github.event.issue.title, 'Logout') || contains(github.event.issue.title, 'app')
         name: Close Issue