update permission on GitHub Token

Thellton · Feb 6, 2024 · d3f8bd4 · d3f8bd4
1 parent 0c7e46a
commit d3f8bd4
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/workflows/azure-static-web-apps-purple-hill-04aebfb03.yml b/.github/workflows/azure-static-web-apps-purple-hill-04aebfb03.yml
@@ -14,6 +14,13 @@ jobs:
     if: github.event_name == 'push' || (github.event_name == 'pull_request' && github.event.action != 'closed')
     runs-on: ubuntu-latest
     name: Build and Deploy Job
+    permissions:
+      actions: read
+      contents: read
+      deployments: read
+      packages: none
+      pull-requests: write
+      security-events: write
     steps:
       - uses: actions/checkout@v2
         with:
@@ -35,6 +42,13 @@ jobs:
   close_pull_request_job:
     if: github.event_name == 'pull_request' && github.event.action == 'closed'
     runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      deployments: read
+      packages: none
+      pull-requests: write
+      security-events: write
     name: Close Pull Request Job
     steps:
       - name: Close Pull Request