From: Brett Cannon <brett@python.org>
Date: Fri, 23 Apr 2021 22:18:50 +0000 (-0700)
Subject: Restrict GITHUB_TOKEN permissions for the 'stale' workflow (GH-25564)
X-Git-Tag: v3.10.0b1~183
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=481994078fbf61317fe35456e9a1b8a960e7dfa0;p=thirdparty%2FPython%2Fcpython.git

Restrict GITHUB_TOKEN permissions for the 'stale' workflow (GH-25564)



It should only need write-level permissions to pull requests.
---

diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 58c9a4f21c30..26806fad814f 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -4,6 +4,9 @@ on:
   schedule:
   - cron: "0 0 * * *"
 
+permissions:
+  pull-requests: write
+
 jobs:
   stale: