don't use top-level permissions

Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>
This commit is contained in:
Mohammed Al Sahaf 2025-11-08 16:34:18 +03:00
parent 7ddb4e1da2
commit f973a9ff4a
No known key found for this signature in database

View File

@ -14,15 +14,14 @@ on:
required: true
type: string
permissions:
contents: write
pull-requests: write
issues: write
jobs:
create-proposal:
name: Create Release Proposal
runs-on: ubuntu-latest
permissions:
contents: write
pull-requests: write
issues: write
steps:
- name: Harden the runner (Audit all outbound calls)