fix: narrow down action permissions to per-job ones

2026-05-06 04:18:10 +00:00 · 2026-04-29 16:41:24 +03:00
parent 956d2f55c3
commit 44c763c302
4 changed files with 40 additions and 8 deletions
@@ -3,12 +3,14 @@ on:
  workflow_dispatch:

 permissions:
-  contents: write
-  pull-requests: write
+  contents: read

 jobs:
  generate-sponsors:
    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2