Merge pull request #55 from rudderlabs/chore/sec-167-rb-facebook-ios

chore(vuln): scope workflow permissions to least privilege (SEC-167)

Author: lokey

.github/workflows/check-pr-title.yml

@@ -4,6 +4,9 @@ on:
     branches: ['master']
     types: ['opened', 'reopened', 'edited', 'synchronize']
 
+permissions:
+  contents: read
+
 jobs:
   check_pr_title:
     name: Check PR title

.github/workflows/manage-github-issue-for-outdated-pods.yml

@@ -5,8 +5,14 @@ on:
     - cron: '0 0 * * 1'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   check-outdated-pods:
+    permissions:
+      contents: read
+      issues: write
     runs-on: macos-latest
     name: Check outdate pods and create issue if it doesn't exist
     steps: