build: harden rebase.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
parent
58c56f8066
commit
591c036dc5
|
@ -2,8 +2,13 @@ name: Automatic Rebase
|
|||
on:
|
||||
issue_comment:
|
||||
types: [created]
|
||||
permissions: {}
|
||||
jobs:
|
||||
rebase:
|
||||
permissions:
|
||||
contents: write # to push code to rebase (cirrus-actions/rebase)
|
||||
pull-requests: read # to get info about PR (cirrus-actions/rebase)
|
||||
|
||||
name: Rebase
|
||||
if: github.event.issue.pull_request != '' && contains(github.event.comment.body, '/rebase')
|
||||
runs-on: ubuntu-latest
|
||||
|
|
Loading…
Reference in New Issue