From 9b0591a39a0dbe387b6e3872e63510366e2024d6 Mon Sep 17 00:00:00 2001 From: Nextcloud bot Date: Sat, 11 Jun 2022 15:15:02 +0000 Subject: [PATCH] Updating command-rebase.yml workflow from template Signed-off-by: Nextcloud bot --- .github/workflows/command-rebase.yml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/.github/workflows/command-rebase.yml b/.github/workflows/command-rebase.yml index a99b3d6336ff9..78fcf5d1918df 100644 --- a/.github/workflows/command-rebase.yml +++ b/.github/workflows/command-rebase.yml @@ -9,9 +9,14 @@ on: issue_comment: types: created +permissions: + contents: read + jobs: rebase: runs-on: ubuntu-latest + permissions: + contents: none # On pull requests and if the comment starts with `/rebase` if: github.event.issue.pull_request != '' && startsWith(github.event.comment.body, '/rebase') @@ -31,11 +36,8 @@ jobs: fetch-depth: 0 token: ${{ secrets.COMMAND_BOT_PAT }} - - name: Fix permissions - run: git config --global --add safe.directory /github/workspace - - name: Automatic Rebase - uses: cirrus-actions/rebase@1.5 + uses: cirrus-actions/rebase@1.7 env: GITHUB_TOKEN: ${{ secrets.COMMAND_BOT_PAT }}