build: fix permissions

neo4j · Sep 26, 2023 · f7f7a8e · f7f7a8e
1 parent 08c6449
commit f7f7a8e
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -10,6 +10,13 @@ jobs:
   pr-check:
     if: ${{ github.event_name == 'pull_request' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
+      pull-requests: write
+      issues: write
+      statuses: write
+      id-token: read
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v3
@@ -19,7 +26,7 @@ jobs:
       - run: npm ci
       - run: npx danger ci --verbose --failOnErrorsdanger
         env:
-          GITHUB_TOKEN: ${{ github.token }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   build:
     runs-on: ubuntu-latest