ci: move permissions for google-internal-tests into job definition (#51847)

Move permissions into the job definition for security improvement.

PR Close #51847
This commit is contained in:
Joey Perrott
2023-09-21 15:24:11 +00:00
committed by Alex Rickabaugh
parent 81e7f5be03
commit 47e841c834
+4 -3
View File
@@ -4,12 +4,13 @@ on:
pull_request_target:
types: [opened, reopened, synchronize]
permissions:
pull-requests: read
statuses: write
permissions: {}
jobs:
trigger:
permissions:
pull-requests: read
statuses: write
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0