chore: lock down permissions

ExodusMovement · Jan 24, 2024 · eca33d2 · eca33d2
1 parent fdc1515
commit eca33d2
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/conflicts.yaml b/.github/workflows/conflicts.yaml
@@ -7,6 +7,9 @@ on:
   pull_request:
     types: [synchronize]
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true

diff --git a/.github/workflows/label.yaml b/.github/workflows/label.yaml
@@ -3,6 +3,9 @@ name: Label
 on:
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   label:
     name: PR