[actions] update checkout action

ljharb · Oct 26, 2022 · bdbe6c9 · bdbe6c9
1 parent 044907b
commit bdbe6c9
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/.github/workflows/rebase.yml b/.github/workflows/rebase.yml
@@ -2,14 +2,21 @@ name: Automatic Rebase
 
 on: [pull_request_target]
 
+permissions:
+  contents: read
+
 jobs:
   _:
+    permissions:
+      contents: write  # for ljharb/rebase to push code to rebase
+      pull-requests: read  # for ljharb/rebase to get info about PR
+
     name: "Automatic Rebase"
 
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: ljharb/rebase@master
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}