fix(cla): Harden action (#867)

The CLA action does not need contents: write permission. Limit it to read for security.
This commit is contained in:
Aaron Dewes
2025-08-26 12:41:29 +02:00
committed by GitHub
parent 215d57979d
commit ad8e34483f

View File

@@ -7,7 +7,7 @@ on:
permissions:
actions: write
contents: write # this can be 'read' if the signatures are in remote repository
contents: read
pull-requests: write
statuses: write