Use more strict permissions on benchmark deploy workflow (#6852)

tensorflow · Sep 26, 2022 · b75a2ce · b75a2ce
1 parent 1b8cc39
commit b75a2ce
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/deploy-benchmark-preview.yml b/.github/workflows/deploy-benchmark-preview.yml
@@ -5,8 +5,13 @@ on:
     paths:
     - "e2e/benchmarks/**"
 
+permissions:
+  contents: read
+
 jobs:
   build_and_preview:
+    permissions:
+      pull-requests: write # for FirebaseExtended/action-hosting-deploy to comment on PRs
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2