[ci] Explicitly declare permissions and limit credentials (#15324)

Authored by: bashonly
2026-09-02 07:00:39 +00:00 · 2025-12-19 13:22:23 -06:00
parent 825648a740
commit a6a8f6b6d6
13 changed files with 96 additions and 43 deletions
--- a/.github/workflows/issue-lockdown.yml
+++ b/.github/workflows/issue-lockdown.yml
@@ -3,13 +3,14 @@ on:
  issues:
    types: [opened]

-permissions:
-  issues: write
+permissions: {}

 jobs:
  lockdown:
    name: Issue Lockdown
    if: vars.ISSUE_LOCKDOWN
+    permissions:
+      issues: write
    runs-on: ubuntu-latest
    steps:
      - name: "Lock new issue"