From 6ae3fcf9b5806ee758b28fd2ad35e7b5a7b3ab49 Mon Sep 17 00:00:00 2001 From: Nextcloud bot Date: Sat, 11 Jun 2022 15:29:08 +0000 Subject: Updating command-rebase.yml workflow from template Signed-off-by: Nextcloud bot --- .github/workflows/command-rebase.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to '.github') diff --git a/.github/workflows/command-rebase.yml b/.github/workflows/command-rebase.yml index 5ad39a1e2de..78fcf5d1918 100644 --- a/.github/workflows/command-rebase.yml +++ b/.github/workflows/command-rebase.yml @@ -9,9 +9,14 @@ on: issue_comment: types: created +permissions: + contents: read + jobs: rebase: runs-on: ubuntu-latest + permissions: + contents: none # On pull requests and if the comment starts with `/rebase` if: github.event.issue.pull_request != '' && startsWith(github.event.comment.body, '/rebase') @@ -32,7 +37,7 @@ jobs: token: ${{ secrets.COMMAND_BOT_PAT }} - name: Automatic Rebase - uses: cirrus-actions/rebase@1.6 + uses: cirrus-actions/rebase@1.7 env: GITHUB_TOKEN: ${{ secrets.COMMAND_BOT_PAT }} -- cgit v1.2.3