From: shenxianpeng <xianpeng.shen@gmail.com>
Date: Thu, 27 Feb 2025 14:57:41 +0000 (+0800)
Subject: [3.13] gh-127785: Limit check labels github action permission (GH-130596) (#130623)
X-Git-Tag: v3.13.3~201
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=676cecac1c3dcfc21b701681db5362ebc94991bb;p=thirdparty%2FPython%2Fcpython.git

[3.13] gh-127785: Limit check labels github action permission (GH-130596) (#130623)

Co-authored-by: shenxianpeng <xianpeng.shen@gmail.com>
---

diff --git a/.github/workflows/require-pr-label.yml b/.github/workflows/require-pr-label.yml
index ee91e2a39a19..d7c2580d4e08 100644
--- a/.github/workflows/require-pr-label.yml
+++ b/.github/workflows/require-pr-label.yml
@@ -10,8 +10,7 @@ jobs:
     if: github.repository_owner == 'python'
     runs-on: ubuntu-latest
     permissions:
-      issues: write
-      pull-requests: write
+      pull-requests: read
     timeout-minutes: 10
 
     steps: