ci: default workflow tokens to read-only contents (#1218)

This commit is contained in:
Jack Amadeo 2026-08-27 06:01:29 -04:00 • committed by GitHub
commit 3501f3e646
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -3,6 +3,9 @@ on:
# Runs workflow when activity on a PR in the workflow's repository occurs.
pull_request_target:
permissions:
contents: read
jobs:
auto-label:
permissions: