GitHub Workflows security hardening
build: harden GitHub Workflow permissions
@@ -13,6 +13,10 @@ on:
jobs:
update-dependencies:
+ permissions:
+ contents: write # to create branch (peter-evans/create-pull-request)
+ pull-requests: write # to create a PR (peter-evans/create-pull-request)
+
name: Update dependencies
runs-on: ubuntu-latest
steps:
