chore: limit the permissions for the job calling the version check wo…

…rkflow Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
theupdateframework · May 10, 2022 · cb5dd1f · cb5dd1f
1 parent 4ac6931
commit cb5dd1f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/specification-version-check.yml b/.github/workflows/specification-version-check.yml
@@ -21,6 +21,9 @@ jobs:
           echo "::set-output name=version::$ver"
   # Get the latest TUF specification release and open an issue (if needed)
   specification-bump-check:
+    permissions:
+      contents: read
+      issues: write
     needs: get-supported-tuf-version
     uses: theupdateframework/specification/.github/workflows/check-latest-spec-version.yml@master
     with: