Backport setting default read-only permissions.

Backports commit: #5a02298ad5a947214ba02655b0a93ac01d4c178a Signed-off-by: James Blair <[email protected]>
ahrtr · Aug 11, 2024 · 31005c1 · 31005c1
1 parent f95c9fb
commit 31005c1
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/gh-workflow-approve.yaml b/.github/workflows/gh-workflow-approve.yaml
@@ -1,5 +1,6 @@
 ---
 name: Approve GitHub Workflows
+permissions: read-all
 
 on:
   pull_request_target: