From 0994256b75125f4cb5342a7ce61cf6cbbf405d5e Mon Sep 17 00:00:00 2001
From: OpenTelemetry Bot <107717825+opentelemetrybot@users.noreply.github.com>
Date: Tue, 1 Jul 2025 00:40:14 -0700
Subject: [PATCH] Add minimum token permissions for all github workflow files
 (#3508)

Co-authored-by: otelbot <197425009+otelbot@users.noreply.github.com>
---
 .github/workflows/benchmark.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index 4641eaf358..314b9c4b4e 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -5,8 +5,7 @@ on:
       - main
 
 permissions:
-  contents: write
-  deployments: write
+  contents: read
 
 jobs:
   benchmark:
@@ -46,6 +45,9 @@ jobs:
           path: benchmarks
   store_benchmark:
     needs: benchmark
+    permissions:
+      contents: write
+      deployments: write
     strategy:
       matrix:
         components: ["api", "sdk", "exporters"]