From 1a5b9894961adb8f133e3b5761ba593663912e54 Mon Sep 17 00:00:00 2001 From: Frank Elsinga Date: Fri, 2 Jan 2026 02:55:14 +0100 Subject: [PATCH] tighten permissions for stalebot --- .github/workflows/stale-bot.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/stale-bot.yml b/.github/workflows/stale-bot.yml index 50c63f314..8cb8dd55d 100644 --- a/.github/workflows/stale-bot.yml +++ b/.github/workflows/stale-bot.yml @@ -4,10 +4,14 @@ on: schedule: - cron: '0 */6 * * *' #Run every 6 hours +permissions: {} jobs: stale: runs-on: ubuntu-latest + permissions: + actions: write + issues: write steps: - uses: actions/stale@997185467fa4f803885201cee163a9f38240193d # v10.1.1 with: @@ -18,7 +22,7 @@ jobs: days-before-close: 7 days-before-pr-stale: -1 days-before-pr-close: -1 - exempt-issue-labels: 'News,Medium,High,discussion,bug,doc,feature-request' + exempt-issue-labels: 'News,discussion,bug,doc,feature-request' exempt-issue-assignees: 'louislam' operations-per-run: 200 - uses: actions/stale@997185467fa4f803885201cee163a9f38240193d # v10.1.1