default_workflow_permissions should be read (#6)

eclipse-eclemma · Sep 10, 2024 · 7d37d43 · 7d37d43
1 parent a1d4d44
commit 7d37d43
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/otterdog/eclipse-eclemma.jsonnet b/otterdog/eclipse-eclemma.jsonnet
@@ -8,7 +8,7 @@ orgs.newOrg('eclipse-eclemma') {
     web_commit_signoff_required: false,
     workflows+: {
       actions_can_approve_pull_request_reviews: false,
-      default_workflow_permissions: "write",
+      default_workflow_permissions: "read",
     },
   },
   webhooks+: [
@@ -43,9 +43,6 @@ orgs.newOrg('eclipse-eclemma') {
           requires_pull_request: false,
         },
       ],
-      workflows+: {
-        default_workflow_permissions: "write",
-      },
     },
     orgs.newRepo('update.eclemma.org') {
       description: "website https://update.eclemma.org",