Improve scorecard

eruvanos · Jun 12, 2024 · 70b63b8 · 70b63b8
1 parent f81f5b1
commit 70b63b8
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
@@ -1,14 +1,16 @@
 name: Dependabot auto-merge
 on: pull_request
 
-permissions:
-  pull-requests: write
-  contents: write
+permissions: {}
+
 
 jobs:
   dependabot:
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' || github.event.label.name == 'automerge' }}
+    permissions:
+      pull-requests: write
+      contents: write
     steps:
       - name: Enable auto-merge for Dependabot PRs
         run: gh pr merge --auto --merge "$PR_URL"