fix(ci): avoid scorecard warning about top-level permissions

Move the cache management permissions to the specific job rather than setting them at the top-level of the given workflow to avoid a warning from scorecard Signed-off-by: Dominic Evans <[email protected]>
IBM · Jan 7, 2025 · 46a805f · 46a805f
1 parent 1464387
commit 46a805f
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/cache-cleanup.yml b/.github/workflows/cache-cleanup.yml
@@ -6,10 +6,12 @@ on:
       - closed
 
 permissions:
-  actions: write # for cache management
+  contents: read # for actions/checkout to fetch code
 
 jobs:
   cleanup:
+    permissions:
+      actions: write # for cache management
     runs-on: ubuntu-latest
     steps:
       - name: Delete Caches