add-upstream permissions

Ouranosinc · Jan 8, 2024 · 271fc70 · 271fc70
1 parent 6e545d1
commit 271fc70
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/upstream.yml b/.github/workflows/upstream.yml
@@ -16,10 +16,16 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:  # added using https://github.com/step-security/secure-repo
+  contents: read
+
 jobs:
   upstream-dev:
     name: test-upstream-dev (Python${{ matrix.python-version }})
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      issues: write
     if: |
       (github.event_name == 'schedule') ||
       (github.event_name == 'workflow_dispatch') ||