From c66dbddfbaa374a6954897809574ee9fb463e393 Mon Sep 17 00:00:00 2001 From: Alex Date: Sat, 8 Oct 2022 11:13:34 +0300 Subject: [PATCH] GitHub Workflows security hardening (#96492) * Update project-updater.yml Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com> * Update project-updater.yml repository-projects: write is not needed because a separate secrets.ADD_TO_PROJECT_PAT is used Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com> --- .github/workflows/project-updater.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/project-updater.yml b/.github/workflows/project-updater.yml index 77e55ed019b..99c7a05ae8c 100644 --- a/.github/workflows/project-updater.yml +++ b/.github/workflows/project-updater.yml @@ -6,6 +6,9 @@ on: - opened - labeled +permissions: + contents: read + jobs: add-to-project: name: Add issues to projects