build: harden render_nanomaps.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
2026-08-26 05:27:39 +01:00 · 2022-09-23 13:01:08 +02:00
parent d8c5438db8
commit f4b73525a4
1 changed files with 5 additions and 0 deletions
@@ -11,8 +11,13 @@ on:
    paths:
      - 'maps/**'

+permissions: {}
 jobs:
  generate_maps:
+    permissions:
+      contents: write # to push to branch
+      pull-requests: write # to create pull requests (repo-sync/pull-request)
+
    name: 'Generate NanoMaps'
    runs-on: ubuntu-latest
    steps: