Chore: Harden action permissions (#104820)

* harden action permissions * Update .github/workflows/ephemeral-instances-pr-comment.yml Co-authored-by: Kevin Minehart <5140827+kminehart@users.noreply.github.com> * update documentation-ci --------- Co-authored-by: Kevin Minehart <5140827+kminehart@users.noreply.github.com>
2025-05-02 12:13:05 +01:00
parent 9a7d85c85f
commit d8fb1e8e4e
11 changed files with 74 additions and 11 deletions
@@ -5,6 +5,7 @@ on:
      - labeled
      - opened
      - synchronize
+permissions: {}
 concurrency:
  group: pr-commands-${{ github.event.number }}
 jobs:
@@ -26,6 +27,9 @@ jobs:

  main:
    needs: config
+    permissions:
+      contents: read
+      pull-requests: write
    if: needs.config.outputs.has-secrets
    runs-on: ubuntu-latest
    steps: