Ensure pemissions are restrictive

PastaPastaPasta · Jul 16, 2021 · c13f9ae · c13f9ae
1 parent c795613
commit c13f9ae
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/workflows/label-merge-conflicts.yml b/.github/workflows/label-merge-conflicts.yml
@@ -8,6 +8,20 @@ on:
   pull_request_target:
     types: [synchronize]
 
+permissions:
+  contents: read
+  pull-requests: write
+  # Enforce other not needed permissions are off
+  actions: none
+  checks: none
+  deployments: none
+  issues: none
+  #metadata: read
+  packages: none
+  repository-projects: none
+  security-events: none
+  statuses: none
+
 jobs:
   main:
     runs-on: ubuntu-latest