narrower allow-run on bump-omicron.ts

oxidecomputer · Oct 3, 2024 · efcaba7 · efcaba7
1 parent 073471c
commit efcaba7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tools/deno/bump-omicron.ts b/tools/deno/bump-omicron.ts
@@ -1,4 +1,4 @@
-#! /usr/bin/env -S deno run --allow-run --allow-net --allow-read --allow-write --allow-env
+#! /usr/bin/env -S deno run --allow-run=gh,git --allow-net --allow-read --allow-write --allow-env
 
 /*
  * This Source Code Form is subject to the terms of the Mozilla Public