mirror of
https://github.com/uutils/coreutils
synced 2024-12-13 14:52:41 +00:00
build: harden GnuComment.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
parent
44cded6c06
commit
d5ab502f42
1 changed files with 5 additions and 0 deletions
5
.github/workflows/GnuComment.yml
vendored
5
.github/workflows/GnuComment.yml
vendored
|
@ -6,8 +6,13 @@ on:
|
|||
types:
|
||||
- completed
|
||||
|
||||
permissions: {}
|
||||
jobs:
|
||||
post-comment:
|
||||
permissions:
|
||||
actions: read # to list workflow runs artifacts
|
||||
pull-requests: write # to comment on pr
|
||||
|
||||
runs-on: ubuntu-latest
|
||||
if: >
|
||||
github.event.workflow_run.event == 'pull_request'
|
||||
|
|
Loading…
Reference in a new issue