github/esphome
2
0
Fork 0
mirror of https://github.com/esphome/esphome.git synced 2026-10-05 10:31:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

[ci] Tighten workflow permissions to least-privilege (#16349)

Browse Source
This commit is contained in:
Jesse Hills
2026-05-11 17:15:53 +12:00
committed by GitHub
parent 5dadfe6367
commit fe66f9ba41
16 changed files with 57 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/external-component-bot.yml
+2 -3
View File
@@ -5,9 +5,8 @@ on:
types: [opened, synchronize]
permissions:
contents: read # Needed to fetch PR details
issues: write # Needed to create and update comments (PR comments are managed via the issues REST API)
pull-requests: write # also needed?
issues: write # issues.createComment / updateComment to post the external-component usage instructions on the PR
pull-requests: read # pulls.listFiles to enumerate which components changed
jobs:
external-comment: