CI security hardening: restrict permissions in restrict-task-creation workflow (#163051)

2026-05-08 17:49:37 +01:00 · 2026-02-15 11:22:25 +01:00
parent 755a3f82d4
commit 7af63460ea
1 changed files with 5 additions and 0 deletions
@@ -5,9 +5,14 @@ on:
  issues:
    types: [opened]

+permissions: {}
+
 jobs:
  check-authorization:
    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      issues: write
    # Only run if this is a Task issue type (from the issue form)
    if: github.event.issue.type.name == 'Task'
    steps: