Merge pull request #21932 from sashashura/patch-1

GitHub Workflows security hardening
This commit is contained in:
Laurent Destailleur 2022-08-29 00:34:58 +02:00 committed by GitHub
commit ac607bbbd5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -6,9 +6,13 @@ on:
- cron: "0 21 * * *" - cron: "0 21 * * *"
issue_comment: issue_comment:
types: [created] types: [created]
permissions: {} # none
jobs: jobs:
stale: stale:
permissions:
issues: write
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: Dolibarr/stale@staleunstale - uses: Dolibarr/stale@staleunstale
@ -21,4 +25,4 @@ jobs:
days-before-close: 10 days-before-close: 10
operations-per-run: 100 operations-per-run: 100
dry-run: false dry-run: false