fix(ci): add permissions to PR jobs

owntracks · Sep 24, 2024 · ed2726f · ed2726f
1 parent e60ca38
commit ed2726f
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/pull-requests.yaml b/.github/workflows/pull-requests.yaml
@@ -21,10 +21,16 @@ name: Pull Requests
 jobs:
   build-test-lint:
     name: Build, Test, and Lint
+    permissions:
+      contents: read
+      checks: write
     uses: ./.github/workflows/build-test-lint.yaml
     secrets: inherit
   espresso-test:
     name: Espresso Test
+    permissions:
+      contents: read
+      checks: write
     uses: ./.github/workflows/espresso.yaml
     secrets: inherit
     needs: