summaryrefslogtreecommitdiffstats
path: root/.github/workflows/fips-label.yml
diff options
context:
space:
mode:
authorVarun Sharma <varunsh@stepsecurity.io>2022-07-09 07:03:23 -0700
committerPauli <pauli@openssl.org>2022-07-13 10:14:09 +1000
commitc6e7f427c82dfa17416a39af7661c40162d57aaf (patch)
tree58c7246295cbe2773db5e97e758ea2a0d2152bb6 /.github/workflows/fips-label.yml
parent6d594fdf52c4824acff9a1e50e2e2ea576a64fd1 (diff)
ci: add GitHub token permissions for workflows
Signed-off-by: Varun Sharma <varunsh@stepsecurity.io> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/18766)
Diffstat (limited to '.github/workflows/fips-label.yml')
-rw-r--r--.github/workflows/fips-label.yml6
1 files changed, 6 insertions, 0 deletions
diff --git a/.github/workflows/fips-label.yml b/.github/workflows/fips-label.yml
index c241801b9e..a22e9bf069 100644
--- a/.github/workflows/fips-label.yml
+++ b/.github/workflows/fips-label.yml
@@ -12,8 +12,14 @@ on:
types:
- completed
+permissions:
+ contents: read
+
jobs:
apply-label:
+ permissions:
+ actions: read
+ pull-requests: write
runs-on: ubuntu-latest
if: ${{ github.event.workflow_run.event == 'pull_request' }}
steps: