Reduce PR job permissions

JonasWanke · Jul 13, 2023 · ea3470b · ea3470b
1 parent b1fa8f5
commit ea3470b
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -6,8 +6,6 @@ jobs:
   assign-author:
     if: github.event.action == 'opened'
     runs-on: ubuntu-latest
-    permissions:
-      pull-requests: write
     steps:
       - uses: samspills/assign-pr-to-author@v1.0.2
         with:
@@ -17,8 +15,7 @@ jobs:
     if: github.event.action == 'opened' && github.event.pull_request.user.login == 'dependabot[bot]'
     runs-on: ubuntu-latest
     permissions:
-      contents: read
-      pull-requests: write
+      pull-requests: read
     steps:
       - uses: dependabot/fetch-metadata@v1.6.0
         id: dependabot-metadata