build: harden dependency-graph.yml permissions

Signed-off-by: Alex <[email protected]>
2026-09-03 16:39:24 +02:00 · 2022-09-25 19:13:42 +02:00
parent 2becadb7c2
commit 9d9e9e5c53
1 changed files with 4 additions and 0 deletions
@@ -3,8 +3,12 @@ name: Submit Dependency Graph
 on:
  push:
    branches: [1.7.x] # default branch of the project
+permissions: {}
 jobs:
  submit-graph:
+    permissions:
+      contents: write # to submit the dependency graph
+
    name: Submit Dependency Graph
    runs-on: ubuntu-latest # or windows-latest, or macOS-latest
    steps: