build: harden version.yml permissions

Signed-off-by: Alex <[email protected]>
opensearch-project · Sep 25, 2022 · 084bdbb · 084bdbb
1 parent e87ab4e
commit 084bdbb
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/version.yml b/.github/workflows/version.yml
@@ -5,8 +5,13 @@ on:
     tags:
       - '*.*.*'
 
+permissions: {}
 jobs:
   build:
+    permissions:
+      contents: write # to create branch (peter-evans/create-pull-request)
+      pull-requests: write # to create a PR (peter-evans/create-pull-request)
+
     runs-on: ubuntu-latest
     steps:
       - name: GitHub App token