Restrict permissions for combine-prs job

This commit is contained in:
daz 2024-12-11 12:31:33 -07:00
parent aef30aae52
commit 69215f1c52
No known key found for this signature in database

View file

@ -3,14 +3,15 @@ name: Combine Bot PRs
on: on:
workflow_dispatch: workflow_dispatch:
# The minimum permissions required to run this Action
permissions: permissions:
contents: write contents: read
pull-requests: write
checks: read
jobs: jobs:
combine-wrapperbot-prs: combine-wrapperbot-prs:
permissions:
contents: write
pull-requests: write
checks: read
if: github.repository == 'gradle/actions' if: github.repository == 'gradle/actions'
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
@ -18,6 +19,6 @@ jobs:
uses: github/combine-prs@v5.2.0 uses: github/combine-prs@v5.2.0
with: with:
branch_prefix: wrapperbot branch_prefix: wrapperbot
combine_branch_name: wrapperbot/combined-wrapper-updates
pr_title: 'Bump Gradle Wrappers' pr_title: 'Bump Gradle Wrappers'
ci_required: "false" ci_required: "false"
github_token: ${{ secrets.BOT_GITHUB_TOKEN }}