From 531da996061e6b426ed3303eb9377f08f4294578 Mon Sep 17 00:00:00 2001 From: Derek McGowan Date: Mon, 17 Jun 2024 12:02:51 -0700 Subject: [PATCH] Reduce scope of permissions in stale workflow Signed-off-by: Derek McGowan --- .github/workflows/stale.yml | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index cd46f16976df..2c7330f90aa1 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -6,13 +6,16 @@ on: paths: - '.github/workflows/stale.yml' -permissions: - issues: write - pull-requests: write +permissions: read-all jobs: stale: runs-on: ubuntu-latest + + permissions: + issues: write + pull-requests: write + steps: - uses: actions/stale@v9 # All stale bot options: https://github.com/actions/stale#all-options