From 097ef55565ef33b2c23f787561eb50415931714f Mon Sep 17 00:00:00 2001 From: Ralph Hightower <32745442+RalphHightower@users.noreply.github.com> Date: Sun, 12 Oct 2025 15:32:21 -0400 Subject: [PATCH] [fix](build): Actions(permissions) Signed-off-by: Ralph Hightower <32745442+RalphHightower@users.noreply.github.com> --- .github/workflows/stale-branches.yml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/stale-branches.yml b/.github/workflows/stale-branches.yml index 94f51b2..bb0b437 100644 --- a/.github/workflows/stale-branches.yml +++ b/.github/workflows/stale-branches.yml @@ -1,16 +1,18 @@ name: stale-branches.yml – Delete Stale Branches on: - #workflow_dispatch: # Manual trigger from GitHub UI + workflow_dispatch: # Manual trigger from GitHub UI schedule: - cron: '0 6 * * 0' -permissions: read-all +permissions: + contents: read jobs: stale_branches: runs-on: ubuntu-latest permissions: + contents: write issues: write steps: - name: Harden the runner (Audit all outbound calls) @@ -35,4 +37,4 @@ jobs: # include-protected-branches: false # include-ruleset-branches: false # ignore-commit-messages: '' - # ignore-committers: '' \ No newline at end of file + # ignore-committers: ''