build: harden calibreapp-image-actions.yml permissions (#4555)

Signed-off-by: Alex <aleksandrosansan@gmail.com> Signed-off-by: Alex <aleksandrosansan@gmail.com>
2022-12-09 03:49:15 +02:00
parent 92ab7c1700
commit 7db2284564
1 changed files with 5 additions and 0 deletions
--- a/.github/workflows/calibreapp-image-actions.yml
+++ b/.github/workflows/calibreapp-image-actions.yml
@@ -24,8 +24,13 @@ on:
  workflow_dispatch:
  schedule:
    - cron: "00 20 * * 0"
+permissions: {}
 jobs:
  build:
+    permissions:
+      contents: write
+      pull-requests: write #  to comment on pull request
+
    name: calibreapp/image-actions
    runs-on: ubuntu-latest
    # Only run on main repo on and PRs that match the main repo.