Skip to content

Commit c249ace

Browse files
[fix](build): Actions(permissions) (#170)
Signed-off-by: Ralph Hightower <[email protected]>
1 parent 9077b67 commit c249ace

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

.github/workflows/stale-branches.yml

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,18 @@
11
name: stale-branches.yml – Delete Stale Branches
22

33
on:
4-
#workflow_dispatch: # Manual trigger from GitHub UI
4+
workflow_dispatch: # Manual trigger from GitHub UI
55
schedule:
66
- cron: '0 6 * * 0'
77

8-
permissions: read-all
8+
permissions:
9+
contents: read
910

1011
jobs:
1112
stale_branches:
1213
runs-on: ubuntu-latest
1314
permissions:
15+
contents: write
1416
issues: write
1517
steps:
1618
- name: Harden the runner (Audit all outbound calls)
@@ -35,4 +37,4 @@ jobs:
3537
# include-protected-branches: false
3638
# include-ruleset-branches: false
3739
# ignore-commit-messages: ''
38-
# ignore-committers: ''
40+
# ignore-committers: ''

0 commit comments

Comments
 (0)