mirror of
https://github.com/uutils/coreutils
synced 2024-12-13 23:02:38 +00:00
build: harden GnuComment.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
parent
44cded6c06
commit
d5ab502f42
1 changed files with 5 additions and 0 deletions
5
.github/workflows/GnuComment.yml
vendored
5
.github/workflows/GnuComment.yml
vendored
|
@ -6,8 +6,13 @@ on:
|
||||||
types:
|
types:
|
||||||
- completed
|
- completed
|
||||||
|
|
||||||
|
permissions: {}
|
||||||
jobs:
|
jobs:
|
||||||
post-comment:
|
post-comment:
|
||||||
|
permissions:
|
||||||
|
actions: read # to list workflow runs artifacts
|
||||||
|
pull-requests: write # to comment on pr
|
||||||
|
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
if: >
|
if: >
|
||||||
github.event.workflow_run.event == 'pull_request'
|
github.event.workflow_run.event == 'pull_request'
|
||||||
|
|
Loading…
Reference in a new issue