From d52761d1663042b3b86d521fa4687230d3a8e04b Mon Sep 17 00:00:00 2001 From: Elias Rohrer Date: Wed, 31 Jan 2024 09:37:32 +0100 Subject: [PATCH] f Explicitly restrict permissions --- .github/workflows/audit.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index a5cd9b5eec9..43c068158a2 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -12,6 +12,11 @@ jobs: macos-latest, ] runs-on: ${{ matrix.platform }} + permissions: + issues: write + issues-reason: to create issues + checks: write + checks-reason: to create checks steps: - uses: actions/checkout@v3 - uses: rustsec/audit-check@v1.4.1