https://github.com/python/cpython/commit/5ba69e747fa9da984a307b2cbc9f82bac1e0db04
commit: 5ba69e747fa9da984a307b2cbc9f82bac1e0db04
branch: main
author: shenxianpeng <[email protected]>
committer: AA-Turner <[email protected]>
date: 2025-02-26T20:47:41Z
summary:

gh-127785: Reduce permissions in the `check labels` workflow (#130596)

files:
M .github/workflows/require-pr-label.yml

diff --git a/.github/workflows/require-pr-label.yml 
b/.github/workflows/require-pr-label.yml
index 0a6277c779ff67..7e534c58c798d1 100644
--- a/.github/workflows/require-pr-label.yml
+++ b/.github/workflows/require-pr-label.yml
@@ -10,8 +10,7 @@ jobs:
     if: github.repository_owner == 'python'
     runs-on: ubuntu-latest
     permissions:
-      issues: write
-      pull-requests: write
+      pull-requests: read
     timeout-minutes: 10
 
     steps:
@@ -28,8 +27,7 @@ jobs:
     if: github.repository_owner == 'python'
     runs-on: ubuntu-latest
     permissions:
-      issues: write
-      pull-requests: write
+      pull-requests: read
     timeout-minutes: 10
 
     steps:

_______________________________________________
Python-checkins mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3/lists/python-checkins.python.org/
Member address: [email protected]

Reply via email to