From 70b63b8dda3c3161f08c07b06511ad10fb996e56 Mon Sep 17 00:00:00 2001
From: Maic Siemering <maic@siemering.tech>
Date: Wed, 12 Jun 2024 12:33:49 -0400
Subject: [PATCH] Improve scorecard

---
 .github/workflows/auto-merge.yml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 2ba98bc..e1b12a0 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -1,14 +1,16 @@
 name: Dependabot auto-merge
 on: pull_request
 
-permissions:
-  pull-requests: write
-  contents: write
+permissions: {}
+
 
 jobs:
   dependabot:
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' || github.event.label.name == 'automerge' }}
+    permissions:
+      pull-requests: write
+      contents: write
     steps:
       - name: Enable auto-merge for Dependabot PRs
         run: gh pr merge --auto --merge "$PR_URL"