From 065245bcce744ee96d0cec6a68772a8b1ddc11e0 Mon Sep 17 00:00:00 2001
From: willcl-ark <will@256k1.dev>
Date: Wed, 19 Jun 2024 10:33:57 +0100
Subject: [PATCH] Grant comment workflow permissions
Only grant the minimal permissions to write a comment on a
pull-request.
---
.github/workflows/comment.yml | 2 ++
1 file changed, 2 insertions(+)
diff --git a/.github/workflows/comment.yml b/.github/workflows/comment.yml
index 97c9fc47701..b490ea4d575 100644
--- a/.github/workflows/comment.yml
+++ b/.github/workflows/comment.yml
@@ -8,6 +8,8 @@ on:
jobs:
comment:
+ permissions:
+ pull-requests: write
runs-on: ubuntu-latest
if: >
github.event.workflow_run.event == 'pull_request' &&