[ci] Tighten workflow permissions to least-privilege (#16349)

2026-09-30 16:30:22 +00:00 · 2026-05-11 17:15:53 +12:00
parent 5dadfe6367
commit fe66f9ba41
16 changed files with 57 additions and 44 deletions
@@ -9,8 +9,8 @@ on:
    types: [labeled]

 permissions:
-  issues: write
-  contents: read
+  issues: write   # issues.createComment to mention component codeowners on the newly labelled issue
+  contents: read  # repos.getContent to fetch CODEOWNERS from the default branch

 jobs:
  notify-codeowners: