From f973a9ff4a4cabbedd849bad8f9a4c0510ddc0e9 Mon Sep 17 00:00:00 2001 From: Mohammed Al Sahaf Date: Sat, 8 Nov 2025 16:34:18 +0300 Subject: [PATCH] don't use top-level permissions Signed-off-by: Mohammed Al Sahaf --- .github/workflows/release-proposal.yml | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/.github/workflows/release-proposal.yml b/.github/workflows/release-proposal.yml index a989ab21c..c6009b4a5 100644 --- a/.github/workflows/release-proposal.yml +++ b/.github/workflows/release-proposal.yml @@ -14,15 +14,14 @@ on: required: true type: string -permissions: - contents: write - pull-requests: write - issues: write - jobs: create-proposal: name: Create Release Proposal runs-on: ubuntu-latest + permissions: + contents: write + pull-requests: write + issues: write steps: - name: Harden the runner (Audit all outbound calls)