From 86452744b9d01cc50c43bd5e5eec93f026fe226e Mon Sep 17 00:00:00 2001 From: Sam Ford <1584702+samford@users.noreply.github.com> Date: Sun, 15 Dec 2024 12:45:44 -0500 Subject: [PATCH] workflows/scheduled: fix excessive-permissions zizmor findings This addresses the `excessive-permissions` error from `zizmor` by moving the `issues: write` permission to the `audit_online` job where it's needed. --- .github/workflows/scheduled.yml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/workflows/scheduled.yml b/.github/workflows/scheduled.yml index 921f505fcc61..9e956a832e3c 100644 --- a/.github/workflows/scheduled.yml +++ b/.github/workflows/scheduled.yml @@ -14,9 +14,6 @@ concurrency: group: scheduled cancel-in-progress: true -permissions: - issues: write - jobs: create_matrix: if: startsWith( github.repository, 'Homebrew/' ) @@ -57,6 +54,8 @@ jobs: HOMEBREW_GITHUB_API_TOKEN: "${{ github.token }}" GH_TOKEN: "${{ github.token }}" REPORTING_ISSUE: 172732 + permissions: + issues: write # To create issues strategy: fail-fast: false matrix: