CI: backport.yml: harden permissions

innFactory · Dec 7, 2024 · 04b227e · 04b227e
1 parent d00d363
commit 04b227e
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
@@ -5,11 +5,17 @@ on:
       - closed
       - labeled
 
-permissions: {}
+permissions:
+  contents: read
+
 jobs:
   backport:
     runs-on: ubuntu-latest
     name: Backport
+
+    permissions:
+      pull-requests: write
+
     steps:
       - name: Backport Bot
         id: backport