From 96b30659367e6541b6a8af907ed0af38d64e17fe Mon Sep 17 00:00:00 2001 From: "Mr. Walls" Date: Fri, 12 Jul 2024 14:27:54 -0700 Subject: [PATCH] Harden default permissions of GH Labler action ( - See #39 - ) --- .github/workflows/Tests.yml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/.github/workflows/Tests.yml b/.github/workflows/Tests.yml index b7be6a8..cba85be 100644 --- a/.github/workflows/Tests.yml +++ b/.github/workflows/Tests.yml @@ -6,6 +6,24 @@ on: - stable tags: - v* + pull_request: + types: + - opened + - edited + - reopened + - ready_for_review + branches-ignore: + - '*-patc*' + pull_request_target: + types: + - opened + - edited + - reopened + - synchronize + - ready_for_review + branches: + - master + - stable # Declare default permissions as read only. permissions: read-all