Add read permissions for Authorization Check workflow job

FOSSBilling · Feb 20, 2025 · 1908042 · 1908042
1 parent 41da03d
commit 1908042
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/build-deploy.yml b/.github/workflows/build-deploy.yml
@@ -10,6 +10,8 @@ jobs:
   # Require authorization/approval before running on external forks/pull requests.
   authorize:
     name: 'Authorization Check'
+    permissions:
+      contents: read
     environment: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.id != github.repository_id && 'external' || 'internal' }}
     runs-on: ubuntu-latest
     steps:
@@ -42,4 +44,4 @@ jobs:
       vercel_token: ${{ secrets.VERCEL_TOKEN }}
     with:
       environment: 'Production'
-      prod_deployment: true
+      prod_deployment: true