SEC: disable default gha permissions (#2771)

2026-03-12 01:15:38 +05:30
parent eaf116e303
commit bc6f42d805
3 changed files with 8 additions and 0 deletions
@@ -14,11 +14,15 @@ on:
  schedule:
    - cron: '0 6 * * 1'  # "At 06:00 on Monday."

+permissions: {}
+
 jobs:
  update-dependencies:
    name: Update dependencies
    if: github.repository_owner == 'pypa' || github.event_name != 'schedule'
    runs-on: ubuntu-latest
+    permissions:
+      contents: write
    steps:

    # we use this step to grab a Github App auth token, so that PRs generated by this workflow