ci: set top-level permissions as well

It should turn on the "restricted" mode by default regardless of
whether the global setting is on or not. New jobs in this action
should have to overwrite it explicitly to gain write access in any
way.

It should also make the action consistent with the other actions
writing various stuff like 'labeler' and 'codeql'.
This commit is contained in:
Evgeny Vereshchagin 2022-06-23 14:09:36 +00:00 committed by Yu Watanabe
parent 1a2620e8bd
commit f3bd663faf

View file

@ -5,6 +5,9 @@ on:
issues:
types: [ opened ]
permissions:
contents: read
jobs:
label-component:
runs-on: ubuntu-22.04