Tighten GITHUB_TOKEN permissions (#2001)

2024-11-22 10:18:33 +00:00
parent bba1fa6d46
commit 1b8ee30693
19 changed files with 38 additions and 0 deletions
@@ -2,8 +2,11 @@ name: Pull Request
 on:
    pull_request_target:
        types: [opened, edited, labeled, unlabeled, synchronize]
+permissions: {}
 jobs:
    action:
        uses: matrix-org/matrix-js-sdk/.github/workflows/pull_request.yaml@develop
+        permissions:
+            pull-requests: read
        secrets:
            ELEMENT_BOT_TOKEN: ${{ secrets.ELEMENT_BOT_TOKEN }}