Set top level token permission for roll.yaml. (#205)

open-webrtc-toolkit · Jul 11, 2024 · a7f12e0 · a7f12e0
1 parent 0bef461
commit a7f12e0
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/roll.yaml b/.github/workflows/roll.yaml
@@ -1,4 +1,6 @@
 name: Roll WebRTC revision
+permissions: read-all
+
 on:
   push:
     branches:
@@ -21,4 +23,4 @@ jobs:
     - run: pip install requests
     - run: python scripts/roll_webrtc.py --base_branch main --revision $GITHUB_SHA --token $OWT_BOT_TOKEN
       env:
-        OWT_BOT_TOKEN: ${{ secrets.OWT_BOT_TOKEN }}
+        OWT_BOT_TOKEN: ${{ secrets.OWT_BOT_TOKEN }}