fix: Apply various fixes per OpenSSF recommendations (#10780)

2026-06-05 11:22:19 +00:00 · 2026-03-23 22:34:59 -07:00
parent b641d275d1
commit 6d4f9e5311
11 changed files with 31 additions and 20 deletions
@@ -1,13 +1,15 @@
 name: Automatic backport/sync action
 permissions:
-  contents: write
-  pull-requests: write
+  contents: read
 on:
  pull_request_target:
    types: ["labeled", "closed"]

 jobs:
  backport:
+    permissions:
+      contents: write
+      pull-requests: write
    name: Backport/sync PR
    runs-on: ubuntu-22.04
    if: github.event.pull_request.merged