Lock down workflow permissions. (#19406)

Co-authored-by: Joel Challis <git@zvecr.com>
2022-12-23 10:41:16 +11:00
parent b8a9de206d
commit f75ac6042e
13 changed files with 41 additions and 4 deletions
@@ -1,5 +1,9 @@
 name: "Pull Request Labeler"

+permissions:
+  contents: read
+  pull-requests: write
+
 on:
  pull_request_target:
    types: [opened, synchronize, reopened, ready_for_review, locked]