fix: address security concerns (#4681)

* fix: address scope of GITHUB_TOKEN in release --------- Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
nginx · Nov 29, 2023 · 39f9fa3 · 39f9fa3
1 parent b2b62ff
commit 39f9fa3
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml
@@ -16,8 +16,13 @@ defaults:
   run:
     shell: bash
 
+permissions:
+  contents: read
+
 jobs:
   release:
+    permissions:
+      contents: write
     runs-on: ubuntu-22.04
     steps:
       - name: Branch