From e8a86439695a970abe63dad820c8f942d64dcaea Mon Sep 17 00:00:00 2001 From: Oskar Eichler Date: Sat, 5 Sep 2026 01:59:20 +0700 Subject: [PATCH] ci: limit workflow token permissions --- .github/workflows/pull-request.yml | 3 +++ .github/workflows/release.yml | 4 ---- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml index 115cab28b..3f351608e 100644 --- a/.github/workflows/pull-request.yml +++ b/.github/workflows/pull-request.yml @@ -4,6 +4,9 @@ on: pull_request: branches: [ main ] +permissions: + contents: read + jobs: build: runs-on: ubuntu-latest diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4e73c1e0f..30d44f8cf 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -11,10 +11,6 @@ jobs: permissions: contents: write id-token: write - issues: write - repository-projects: write - deployments: write - packages: write pull-requests: write steps: