fix: github actions permissions

Signed-off-by: Junjie Gao <[email protected]>
notaryproject · Oct 8, 2024 · bfac721 · bfac721
1 parent 4c0a3da
commit bfac721
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/.github/workflows/license-checker.yml b/.github/workflows/license-checker.yml
@@ -28,7 +28,4 @@ permissions:
 
 jobs:
   check-license:
-    permissions:
-      contents: write
-      pull-requests: write
     uses: notaryproject/notation-core-go/.github/workflows/reusable-license-checker.yml@main
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
@@ -16,11 +16,18 @@ on:
   schedule:
     - cron: "30 1 * * *"
 
+
+permissions:
+  contents: read
+
 jobs:
   stale:
+    permissions:
+      issues: write
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9.0.0
         with:
           stale-issue-message: "This issue is stale because it has been opened for 60 days with no activity. Remove stale label or comment. Otherwise, it will be closed in 30 days."
           stale-pr-message: "This PR is stale because it has been opened for 45 days with no activity. Remove stale label or comment. Otherwise, it will be closed in 30 days."