[actions] restrict permissions for GITHUB_TOKEN
This commit is contained in:
committed by
Jordan Harband
parent
2dad0455ec
commit
59532c74c6
2
.github/workflows/release.yml
vendored
2
.github/workflows/release.yml
vendored
@@ -4,6 +4,8 @@ on: [pull_request, push]
|
||||
|
||||
jobs:
|
||||
release:
|
||||
permissions:
|
||||
contents: read
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@v2
|
||||
|
||||
Reference in New Issue
Block a user