From c469ddddffc8f32e3c80cb6d82b5c1dc76c3deff Mon Sep 17 00:00:00 2001
From: Christian Fehmer <fehmer@users.noreply.github.com>
Date: Wed, 22 Jan 2025 16:19:32 +0100
Subject: [PATCH] ci: limit permissions for the update labels workflow
 (@fehmer) (#6200)

---
 .github/workflows/update-labels.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/update-labels.yml b/.github/workflows/update-labels.yml
index 45d6b9ca2..13690071c 100644
--- a/.github/workflows/update-labels.yml
+++ b/.github/workflows/update-labels.yml
@@ -1,5 +1,9 @@
 name: Check labels to update
 
+permissions:
+  actions: read
+  pull-requests: read
+
 on:
   pull_request_target:
     types: