Reduce scope of permissions in stale workflow

Signed-off-by: Derek McGowan <[email protected]>
Jenkins-J · Jun 17, 2024 · 531da99 · 531da99
1 parent 27de5fe
commit 531da99
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
@@ -6,13 +6,16 @@ on:
     paths:
       - '.github/workflows/stale.yml'
 
-permissions:
-  issues: write
-  pull-requests: write
+permissions: read-all
 
 jobs:
   stale:
     runs-on: ubuntu-latest
+
+    permissions:
+      issues: write
+      pull-requests: write
+
     steps:
       - uses: actions/stale@v9
         # All stale bot options: https://github.com/actions/stale#all-options