Reduce PR job permissions

JonasWanke · Jul 13, 2023 · 13e8d9f · 13e8d9f
1 parent 75337a1
commit 13e8d9f
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -6,8 +6,6 @@ jobs:
   assign-author:
     if: github.event.action == 'opened'
     runs-on: ubuntu-latest
-    permissions:
-      pull-requests: write
     steps:
       - uses: samspills/[email protected]
         with:
@@ -17,8 +15,7 @@ jobs:
     if: github.event.action == 'opened' && github.event.pull_request.user.login == 'dependabot[bot]'
     runs-on: ubuntu-latest
     permissions:
-      contents: read
-      pull-requests: write
+      pull-requests: read
     steps:
       - uses: dependabot/[email protected]
         id: dependabot-metadata