fix: removed wrong permissions from lock-file-maintenance.yml

anolilab · Jul 3, 2024 · f223b0b · f223b0b
1 parent 955cc0d
commit f223b0b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 4 deletions.
diff --git a/.github/workflows/lock-file-maintenance.md b/.github/workflows/lock-file-maintenance.md
@@ -42,6 +42,8 @@ permissions:
 jobs:
     stale-issues:
         uses: "anolilab/workflows/.github/workflows/lock-file-maintenance.yml@main"
+        permissions:
+            contents: "write" # commit and push
         with:
             target-repo: "visulima/visulima"
 ```
diff --git a/.github/workflows/lock-file-maintenance.yml b/.github/workflows/lock-file-maintenance.yml
@@ -24,10 +24,7 @@ jobs:
         if: "github.repository == inputs.target-repo"
         runs-on: "ubuntu-latest"
         permissions:
-            contents: "write" # to be able to publish a GitHub release
-            issues: "write" # to be able to comment on released issues
-            pull-requests: "write" # to be able to comment on released pull requests
-            id-token: "write" # to enable use of OIDC for npm provenance
+            contents: "write"
 
         steps:
             - name: "Harden Runner"