Restrict GITHUB_TOKEN permissions (microsoft#16013)

brettcannon · web-flow · commit 87357db51b46 · 2021-04-21T14:40:19.000-07:00
diff --git a/.github/workflows/assign-reviewers.yml b/.github/workflows/assign-reviewers.yml
@@ -9,6 +9,9 @@ on:
       - 'review_request_removed'
       - 'ready_for_review'
 
+permissions:
+  pull-requests: write
+
 jobs:
   assign:
     name: 'Assignee & Code Reviewers'
diff --git a/.github/workflows/issue-labels.yml b/.github/workflows/issue-labels.yml
@@ -4,6 +4,9 @@ on:
   issues:
     types: [opened, reopened]
 
+permissions:
+  issues: write
+
 jobs:
   # From https://github.com/marketplace/actions/github-script#apply-a-label-to-an-issue.
   add-classify-label:
