chore: harden security settings

Signed-off-by: Claudio W <[email protected]>
nodejs · Nov 25, 2023 · 588511a · 588511a
1 parent dec347f
commit 588511a
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/.github/workflows/translations-pr.yml b/.github/workflows/translations-pr.yml
@@ -16,11 +16,7 @@ on:
       - '!i18n/locales/en.json'
 
 permissions:
-  # This permission is required by `stefanzweifel/git-auto-commit-action`
-  contents: write
   actions: read
-  # This permission is required by `thollander/actions-comment-pull-request`
-  pull-requests: write
 
 jobs:
   comment_on_translation_pr:
@@ -32,6 +28,10 @@ jobs:
     name: Comment on Translation PR
     runs-on: ubuntu-latest
 
+    permissions:
+      # This permission is required by `thollander/actions-comment-pull-request`
+      pull-requests: write
+
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
@@ -59,6 +59,10 @@ jobs:
     name: Format Crowdin Pull Request
     runs-on: ubuntu-latest
 
+    permissions:
+      # This permission is required by `stefanzweifel/git-auto-commit-action`
+      contents: write
+
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1