actions: add some permission restrictions

2021-04-24 13:07:57 -04:00
parent b7e08de1e9
commit 9d95ba3dd6
3 changed files with 8 additions and 0 deletions
@@ -4,6 +4,10 @@ on:
  pull_request_target:
    types: [edited, opened, synchronize, reopened]

+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
  labels:
    runs-on: ubuntu-latest
@@ -1,5 +1,7 @@
 name: "Build NixOS manual"

+permissions: read-all
+
 on:
  pull_request_target:
    branches:
@@ -1,5 +1,7 @@
 name: "Build Nixpkgs manual"

+permissions: read-all
+
 on:
  pull_request_target:
    branches: