Restrict TagBot permissions (#132)

JuliaTesting · Jul 23, 2024 · 4175e27 · 4175e27
1 parent 69a26a6
commit 4175e27
Showing 1 changed file with 13 additions and 13 deletions.
diff --git a/.github/workflows/TagBot.yml b/.github/workflows/TagBot.yml
@@ -7,23 +7,23 @@ on:
     inputs:
       lookback:
         default: "3"
-permissions:
-  actions: read
-  checks: read
-  contents: write
-  deployments: read
-  issues: read
-  discussions: read
-  packages: read
-  pages: read
-  pull-requests: read
-  repository-projects: read
-  security-events: read
-  statuses: read
 jobs:
   TagBot:
     if: ${{ github.event_name == 'workflow_dispatch' || github.actor == 'JuliaTagBot' }}
     runs-on: ubuntu-latest
+    permissions:
+      # actions: read
+      # checks: read
+      contents: write
+      # deployments: read
+      # issues: read
+      # discussions: read
+      # packages: read
+      # pages: read
+      # pull-requests: read
+      # repository-projects: read
+      # security-events: read
+      # statuses: read
     steps:
       - uses: JuliaRegistries/TagBot@v1
         with: