[StepSecurity] ci: Harden GitHub Actions in maintenance.yml

mui · Oct 5, 2022 · 136bab7 · 136bab7
1 parent 93aeccb
commit 136bab7
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/maintenance.yml b/.github/workflows/maintenance.yml
@@ -14,8 +14,13 @@ on:
       - next
     types: [synchronize]
 
+permissions:  # added using https://github.com/step-security/secure-workflows
+  contents: read
+
 jobs:
   main:
+    permissions:
+      pull-requests: write  # for eps1lon/actions-label-merge-conflict to label PRs
     runs-on: ubuntu-latest
     steps:
       - name: check if prs are dirty