fix: narrow down action permissions to per-job ones

2026-05-07 12:58:12 +00:00 · 2026-04-29 16:41:24 +03:00
parent 956d2f55c3
commit 44c763c302
4 changed files with 40 additions and 8 deletions
@@ -4,12 +4,14 @@ on:
    - cron: 0 10 * * *

 permissions:
-  issues: write
-  pull-requests: write
+  contents: read

 jobs:
  stale:
    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
    steps:
      - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10
        with: