domenico/openwrt-R7800-nss
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

build: harden GitHub workflow permissions

Browse Source 
Grant pull-requests write permission to the labeler workflow and
read-only to everything else.

Signed-off-by: Alex Low <aleksandrosansan@gmail.com>
[ wrap to 80 columns and fix wrong author as requested by author itself ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
This commit is contained in:
Alex Low
2022-09-19 12:20:37 +02:00
committed by Christian Marangi
parent 412fcf3d44
commit 7152599407
4 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
.github/workflows/labeler.yml vendored
View File

@@ -2,8 +2,15 @@ name: 'Pull Request Labeler'
on:
- pull_request_target
permissions:
contents: read
jobs:
labeler:
permissions:
contents: read # to determine modified files (actions/labeler)
pull-requests: write # to add labels to PRs (actions/labeler)
name: Pull Request Labeler
runs-on: ubuntu-latest
steps: