Fix manifest_sync.yml: Limit permission contents: read

Signed-off-by: Jiahao XU <[email protected]>
taiki-e · Dec 5, 2024 · c270e26 · c270e26
1 parent b2feb06
commit c270e26
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/manifest_sync.yml b/.github/workflows/manifest_sync.yml
@@ -1,5 +1,8 @@
 name: manifest synchronization
 
+permissions:
+  contents: read
+
 on:
   workflow_call:
   release:
@@ -17,6 +20,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: true
 
       - name: Checkout manifest-schema branch
         run: ./tools/checkout-manifest-schema-branch.sh $WORKSPACE