Resolve `issue-manager.yml`

diff --git a/.github/workflows/issue-manager.yml b/.github/workflows/issue-manager.yml
index 065ee4ceb9a5a95a684e61dea8bb0cc3165570dd..8b5697a344453b80db55448284da6a6431d16e47 100644 (file)
--- a/.github/workflows/issue-manager.yml
+++ b/.github/workflows/issue-manager.yml
@@ -9,19 +9,20 @@ on:
   issues:
     types:
       - labeled
-  pull_request_target:
+  pull_request_target: # zizmor: ignore[dangerous-triggers]
     types:
       - labeled
   workflow_dispatch:
 
-permissions:
-  issues: write
-  pull-requests: write
+permissions: {}
 
 jobs:
   issue-manager:
     if: github.repository_owner == 'fastapi'
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
     steps:
       - name: Dump GitHub context
         env: