add top level permission to gh action (nginx#5584)

ssrahul96 · Jun 20, 2024 · e95e59c · e95e59c
1 parent 7aef14a
commit e95e59c
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/.github/workflows/cherry-pick.yml b/.github/workflows/cherry-pick.yml
@@ -5,9 +5,15 @@ on:
       - main
     types: ["closed"]
 
+permissions:
+  contents: read
+
 jobs:
   cherry_pick_to_release:
-    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    runs-on: ubuntu-22.04
     name: Cherry pick into release-3.5
     if: ${{ contains(github.event.pull_request.labels.*.name, 'dependencies') && github.event.pull_request.merged == true }}
     steps: