[ci] Explicitly declare permissions and limit credentials (#15324)

Authored by: bashonly
2026-09-10 02:35:55 +00:00 · 2025-12-19 19:22:23 +00:00
parent 825648a740
commit a6a8f6b6d6
13 changed files with 96 additions and 43 deletions
@@ -4,13 +4,14 @@ on:
  issue_comment:
    types: [created, edited]

-permissions:
-  issues: write
+permissions: {}

 jobs:
  sanitize-comment:
    name: Sanitize comment
    if: vars.SANITIZE_COMMENT && !github.event.issue.pull_request
+    permissions:
+      issues: write
    runs-on: ubuntu-latest
    steps:
      - name: Sanitize comment