Harden GitHub Workflows security settings

Closes gh-29171 Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com>
2022-09-19 12:19:35 +02:00 · 2022-09-19 12:19:35 +02:00 · 5277b1dbf0
parent 3e41d7f23e
commit 5277b1dbf0
1 changed files with 5 additions and 0 deletions
--- a/.github/workflows/backport-bot.yml
+++ b/.github/workflows/backport-bot.yml
@ -6,8 +6,13 @@ on:
  push:
    branches:
      - '*.x'
+permissions:
+  contents: read
 jobs:
  build:
+    permissions:
+      contents: read
+      issues: write
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3