https://github.com/python/cpython/commit/5ba69e747fa9da984a307b2cbc9f82bac1e0db04
commit: 5ba69e747fa9da984a307b2cbc9f82bac1e0db04
branch: main
author: shenxianpeng <xianpeng.s...@gmail.com>
committer: AA-Turner <9087854+aa-tur...@users.noreply.github.com>
date: 2025-02-26T20:47:41Z
summary:

gh-127785: Reduce permissions in the `check labels` workflow (#130596)

files:
M .github/workflows/require-pr-label.yml

diff --git a/.github/workflows/require-pr-label.yml 
b/.github/workflows/require-pr-label.yml
index 0a6277c779ff67..7e534c58c798d1 100644
--- a/.github/workflows/require-pr-label.yml
+++ b/.github/workflows/require-pr-label.yml
@@ -10,8 +10,7 @@ jobs:
     if: github.repository_owner == 'python'
     runs-on: ubuntu-latest
     permissions:
-      issues: write
-      pull-requests: write
+      pull-requests: read
     timeout-minutes: 10
 
     steps:
@@ -28,8 +27,7 @@ jobs:
     if: github.repository_owner == 'python'
     runs-on: ubuntu-latest
     permissions:
-      issues: write
-      pull-requests: write
+      pull-requests: read
     timeout-minutes: 10
 
     steps:

_______________________________________________
Python-checkins mailing list -- python-checkins@python.org
To unsubscribe send an email to python-checkins-le...@python.org
https://mail.python.org/mailman3/lists/python-checkins.python.org/
Member address: arch...@mail-archive.com

Reply via email to