Update welcome-new-users.yml set permissions

Set permissions as described in issue #31 Signed-off-by: Yacine Kheddache <[email protected]>
microcks · Nov 7, 2024 · 1138dad · 1138dad
1 parent 8e79167
commit 1138dad
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/welcome-new-users.yml b/.github/workflows/welcome-new-users.yml
@@ -9,8 +9,13 @@ on:
     types: [opened, closed]
   issues:
     types: [opened]
+permissions:
+  contents: read  # Set permissions as read-only by default at the top level
 jobs:
   run:
+    permissions:
+      issues: write  # for wow-actions/welcome to comment on issues
+      pull-requests: write  # wow-actions/welcome to comment on PRs
     # Do not run on bots and maintainers
     if: ${{ !contains(fromJson('["dependabot[bot]", "dependabot-preview[bot]", "allcontributors[bot]"]'), github.actor) }}
     runs-on: ubuntu-latest