infra: Limit permissions on trigger-webui workflow

This is just a good practice everywhere.
rhinstaller · Dec 2, 2024 · 71c3961 · 71c3961
1 parent af4caca
commit 71c3961
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/trigger-webui.yml b/.github/workflows/trigger-webui.yml
@@ -27,6 +27,12 @@ on:
       - 'po/l10n-config.mk'
     branches:
       - 'master'
+
+permissions:
+  contents: read
+  pull-requests: write
+  statuses: write
+
 jobs:
   trigger:
     runs-on: ubuntu-22.04

diff --git a/.github/workflows/trigger-webui.yml.j2 b/.github/workflows/trigger-webui.yml.j2
@@ -21,6 +21,12 @@ on:
       - 'po/l10n-config.mk'
     branches:
       - 'master'
+
+permissions:
+  contents: read
+  pull-requests: write
+  statuses: write
+
 jobs:
   trigger:
     runs-on: ubuntu-22.04