build: harden GnuComment.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
Alex 2022-10-30 23:52:55 +02:00
parent 44cded6c06
commit d5ab502f42

View file

@ -6,8 +6,13 @@ on:
types:
- completed
permissions: {}
jobs:
post-comment:
permissions:
actions: read # to list workflow runs artifacts
pull-requests: write # to comment on pr
runs-on: ubuntu-latest
if: >
github.event.workflow_run.event == 'pull_request'