From 04b227e3866a16f3efad9cd38056ff4ac88af76b Mon Sep 17 00:00:00 2001 From: Even Rouault Date: Sat, 7 Dec 2024 16:24:49 +0100 Subject: [PATCH] CI: backport.yml: harden permissions --- .github/workflows/backport.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml index f04f0a2f8976..1dc61a6ecbaa 100644 --- a/.github/workflows/backport.yml +++ b/.github/workflows/backport.yml @@ -5,11 +5,17 @@ on: - closed - labeled -permissions: {} +permissions: + contents: read + jobs: backport: runs-on: ubuntu-latest name: Backport + + permissions: + pull-requests: write + steps: - name: Backport Bot id: backport