Merge pull request #13858 from sashashura/patch-1

GitHub Workflows security hardening
3 years ago · 7a4d214dce
parent 0c0643cc9d bce5270146
commit 7a4d214dce
1 changed files with 4 additions and 0 deletions
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@ -2,8 +2,12 @@ name: Pull request labeler
 on:
  schedule:
    - cron: '0 12 */1 * *'
+permissions:
+  contents: read
 jobs:
  labeler:
+    permissions:
+      pull-requests: write
    runs-on: ubuntu-latest
    steps:
      - uses: paulfantom/periodic-labeler@master