From: Alex <aleksandrosansan@gmail.com>
Date: Sat, 8 Oct 2022 08:13:34 +0000 (+0300)
Subject: GitHub Workflows security hardening (#96492)
X-Git-Tag: v3.12.0a1~155
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c66dbddfbaa374a6954897809574ee9fb463e393;p=thirdparty%2FPython%2Fcpython.git

GitHub Workflows security hardening (#96492)

* Update project-updater.yml

Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com>

* Update project-updater.yml

repository-projects: write is not needed because a separate secrets.ADD_TO_PROJECT_PAT is used

Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com>
---

diff --git a/.github/workflows/project-updater.yml b/.github/workflows/project-updater.yml
index 77e55ed019b2..99c7a05ae8ca 100644
--- a/.github/workflows/project-updater.yml
+++ b/.github/workflows/project-updater.yml
@@ -6,6 +6,9 @@ on:
       - opened
       - labeled
 
+permissions:
+  contents: read
+
 jobs:
   add-to-project:
     name: Add issues to projects