98a182d71b59a24d6b694d3e6b7a49212c06e04f
Author Marc Cornellà <marc@mcornella.com> Committer GitHub <noreply@github.com> Date 2025-07-28 17:13 UTC
Message ci: add strict permissions to `dependencies.yml` workflow (#13232)
Just use `contents:read` initial permission. The other permissions needed are
those attached to the @ohmyzsh GitHub App.
Diff 1 diff --git a/.github/workflows/dependencies.yml b/.github/workflows/dependencies.yml
2 index 6c738708966bcc736e51294d7ad6c8bb51724323..b4a17912b8cd36d929460662b3dc1e2fbdf4b7d5 100644
3 --- a/.github/workflows/dependencies.yml
4 +++ b/.github/workflows/dependencies.yml
5 @@ -4,6 +4,9 @@ on:
6 schedule:
7 - cron: "0 6 * * 0"
8
9 +permissions:
10 + contents: read
11 +
12 jobs:
13 check:
14 name: Check for updates