explicit read permissions for PRs

FAIR-Chem · Aug 12, 2024 · 9aba163 · 9aba163
1 parent 4a81c82
commit 9aba163
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 0 deletions.
diff --git a/.github/workflows/release-drafter-applications_cattsunami.yml b/.github/workflows/release-drafter-applications_cattsunami.yml
@@ -17,6 +17,7 @@ jobs:
     permissions:
         # write permission is required to create a github release
         contents: write
+        pull-requests: read
     runs-on: ubuntu-latest
     steps:
       - uses: release-drafter/release-drafter@v6

diff --git a/.github/workflows/release-drafter-core.yml b/.github/workflows/release-drafter-core.yml
@@ -17,6 +17,7 @@ jobs:
     permissions:
         # write permission is required to create a github release
         contents: write
+        pull-requests: read
     runs-on: ubuntu-latest
     steps:
       - uses: release-drafter/release-drafter@v6

diff --git a/.github/workflows/release-drafter-data_oc.yml b/.github/workflows/release-drafter-data_oc.yml
@@ -18,6 +18,7 @@ jobs:
     permissions:
         # write permission is required to create a github release
         contents: write
+        pull-requests: read
     runs-on: ubuntu-latest
     steps:
       - uses: release-drafter/release-drafter@v6

diff --git a/.github/workflows/release-drafter-demo_ocpapi.yml b/.github/workflows/release-drafter-demo_ocpapi.yml
@@ -18,6 +18,7 @@ jobs:
     permissions:
         # write permission is required to create a github release
         contents: write
+        pull-requests: read
     runs-on: ubuntu-latest
     steps:
       - uses: release-drafter/release-drafter@v6