From 21291b53fda8d61f8a129f270059504b608f43d7 Mon Sep 17 00:00:00 2001
From: Alex <aleksandrosansan@gmail.com>
Date: Sun, 25 Sep 2022 18:10:53 +0200
Subject: [PATCH] build: harden label_pr.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
---
 .github/workflows/label_pr.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/label_pr.yml b/.github/workflows/label_pr.yml
index 8e3f8b81a2..cd6036958f 100644
--- a/.github/workflows/label_pr.yml
+++ b/.github/workflows/label_pr.yml
@@ -7,6 +7,10 @@ on:
       - reopened
       - synchronize
 
+permissions:
+  contents: read # to determine modified files (actions/labeler)
+  pull-requests: write # to add labels to PRs (actions/labeler)
+
 jobs:
   triage:
     runs-on: ubuntu-latest