build: harden remove-needs-triage.yml permissions
@@ -4,8 +4,12 @@ on:
issues:
types: [assigned]
+permissions: {}
jobs:
remove_label:
+ permissions:
+ issues: write # to remove issue labels (actions-ecosystem/action-remove-labels)
+
runs-on: ubuntu-latest
steps:
- uses: actions-ecosystem/action-remove-labels@v1
