chore: limit the permissions for the job calling the version check wo…

…rkflow Signed-off-by: Radoslav Dimitrov <[email protected]>
theupdateframework · May 10, 2022 · ffdc87d · ffdc87d
1 parent deeb5c8
commit ffdc87d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/specification-version-check.yml b/.github/workflows/specification-version-check.yml
@@ -6,6 +6,9 @@ name: Specification version check
 jobs:
   # Get the latest TUF specification release and open an issue (if needed)
   specification-bump-check:
+    permissions:
+      contents: read
+      issues: write
     uses: theupdateframework/specification/.github/workflows/check-latest-spec-version.yml@master
     with:
       tuf-version: "v1.0.29" # Should be updated to the according version either manually or extracted automatically as how it's done in python-tuf