[3.12] gh-127785: Limit check labels github action permission (GH-130596) (#130625)

Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>

diff --git a/.github/workflows/require-pr-label.yml b/.github/workflows/require-pr-label.yml
index ee91e2a39a198d0e4cfce49ed2dd970850d794ae..d7c2580d4e0808a37671f435a354d9e72e194988 100644 (file)
--- a/.github/workflows/require-pr-label.yml
+++ b/.github/workflows/require-pr-label.yml
@@ -10,8 +10,7 @@ jobs:
     if: github.repository_owner == 'python'
     runs-on: ubuntu-latest
     permissions:
-      issues: write
-      pull-requests: write
+      pull-requests: read
     timeout-minutes: 10
 
     steps: