chore: limit the permissions for the job calling the version check wo…

…rkflow Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
theupdateframework · May 31, 2022 · 04cfad5 · 04cfad5
1 parent f372ec8
commit 04cfad5
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/specification-version-check.yml b/.github/workflows/specification-version-check.yml
@@ -21,6 +21,9 @@ jobs:
           echo "::set-output name=version::$ver"
   # Get the latest TUF specification release and open an issue (if needed)
   specification-bump-check:
+    permissions:
+      contents: read
+      issues: write
     needs: get-supported-tuf-version
     uses: theupdateframework/specification/.github/workflows/check-latest-spec-version.yml@master
     with: