summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMarc Cornellà <marc@mcornella.com>2025-07-28 19:13:35 +0200
committerGitHub <noreply@github.com>2025-07-28 19:13:35 +0200
commit98a182d71b59a24d6b694d3e6b7a49212c06e04f (patch)
treec2953c10aeb73119fd552d0182aaf2d7d76c2e8b
parent52f7ad6913cd039c32f4088d101c30db2492d518 (diff)
downloadzsh-98a182d71b59a24d6b694d3e6b7a49212c06e04f.tar.gz
zsh-98a182d71b59a24d6b694d3e6b7a49212c06e04f.tar.bz2
zsh-98a182d71b59a24d6b694d3e6b7a49212c06e04f.zip
ci: add strict permissions to `dependencies.yml` workflow (#13232)
Just use `contents:read` initial permission. The other permissions needed are those attached to the @ohmyzsh GitHub App.
-rw-r--r--.github/workflows/dependencies.yml3
1 files changed, 3 insertions, 0 deletions
diff --git a/.github/workflows/dependencies.yml b/.github/workflows/dependencies.yml
index 6c7387089..b4a17912b 100644
--- a/.github/workflows/dependencies.yml
+++ b/.github/workflows/dependencies.yml
@@ -4,6 +4,9 @@ on:
schedule:
- cron: "0 6 * * 0"
+permissions:
+ contents: read
+
jobs:
check:
name: Check for updates