From b3bda415da6b91865ee371bf27e97f7dc0992c04 Mon Sep 17 00:00:00 2001
From: Alex <aleksandrosansan@gmail.com>
Date: Sun, 25 Sep 2022 18:12:14 +0200
Subject: [PATCH] build: harden label_issue.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
---
 .github/workflows/label_issue.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/label_issue.yml b/.github/workflows/label_issue.yml
index ead15724bb..d5b00d1d29 100644
--- a/.github/workflows/label_issue.yml
+++ b/.github/workflows/label_issue.yml
@@ -6,6 +6,10 @@ on:
       - opened
       - reopened
 
+    permissions:
+      contents: read # to fetch code
+      issues: write # to label issues
+
 jobs:
   triage:
     runs-on: ubuntu-latest