Enforce PR labels: change permissions to read (#52980)

WordPress · Jul 26, 2023 · 1503530 · 1503530 · github-actions · Jul 26, 2023
1 parent fdfffbc
commit 1503530
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/enforce-pr-labels.yml b/.github/workflows/enforce-pr-labels.yml
@@ -6,7 +6,8 @@ jobs:
   type-related-labels:
     runs-on: ubuntu-latest
     permissions:
-      pull-requests: write
+      issues: read
+      pull-requests: read
     steps:
       - uses: mheap/github-action-required-labels@v5
         with:
@@ -15,5 +16,5 @@ jobs:
           labels: "[Type] Accessibility (a11y), [Type] Automated Testing, [Type] Breaking Change, [Type] Bug, [Type] Build Tooling, [Type] Code Quality, [Type] Copy, [Type] Developer Documentation, [Type] Enhancement, [Type] Experimental, [Type] Feature, [Type] New API, [Type] Task, [Type] Performance, [Type] Project Management, [Type] Security, [Type] WP Core Ticket"
           add_comment: true
           message: "## ⚠️ Type of PR label error\n To merge this PR, it requires {{ errorString }} {{ count }} label indicating the type of PR. Other labels are optional and not being checked here. \n- **Type-related labels to choose from**: {{ provided }}.\n- **Labels found**: {{ applied }}."
-          token: ${{ secrets.GUTENBERG_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}
           exit_type: success