Merge pull request #1576 from smallstep/carl/cicd-security-hardening

tashian · web-flow · commit 3faba1596d65 · 2026-03-02T16:28:13.000-08:00
Add least-privilege permissions to triage workflow
diff --git a/.github/workflows/triage.yml b/.github/workflows/triage.yml
@@ -10,6 +10,10 @@ on:
       - opened
       - reopened
 
+permissions:
+  pull-requests: write
+  issues: write
+
 jobs:
   triage:
     uses: smallstep/workflows/.github/workflows/triage.yml@main
