From: Evgeny Vereshchagin <evvers@ya.ru>
Date: Thu, 23 Jun 2022 14:09:36 +0000 (+0000)
Subject: ci: set top-level permissions as well
X-Git-Tag: v252-rc1~773
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f3bd663faf2235ca31b99679a6a35f0496dfb3b8;p=thirdparty%2Fsystemd.git

ci: set top-level permissions as well

It should turn on the "restricted" mode by default regardless of
whether the global setting is on or not. New jobs in this action
should have to overwrite it explicitly to gain write access in any
way.

It should also make the action consistent with the other actions
writing various stuff like 'labeler' and 'codeql'.
---

diff --git a/.github/workflows/issue_labeler.yml b/.github/workflows/issue_labeler.yml
index c4143037ce3..64774e67cc3 100644
--- a/.github/workflows/issue_labeler.yml
+++ b/.github/workflows/issue_labeler.yml
@@ -5,6 +5,9 @@ on:
   issues:
     types: [ opened ]
 
+permissions:
+  contents: read
+
 jobs:
   label-component:
     runs-on: ubuntu-22.04