chore(ci): tighten permissions for AI workflows (#22471)

2026-09-24 15:04:27 +08:00 · 2026-03-10 16:43:36 +05:00
parent 3167908358
commit a21f00d250
4 changed files with 12 additions and 4 deletions
@@ -26,6 +26,9 @@ on:
        default: "traiage"
        type: string

+permissions:
+  contents: read
+
 jobs:
  traiage:
    name: Triage GitHub Issue with Claude Code
@@ -38,7 +41,6 @@ jobs:
    permissions:
      contents: read
      issues: write
-      actions: write

    steps:
      # This is only required for testing locally using nektos/act, so leaving commented out.