From 845caa5ee72e53a06b09472028366bb2820fcc9c Mon Sep 17 00:00:00 2001
From: Alex <aleksandrosansan@gmail.com>
Date: Tue, 20 Sep 2022 12:47:49 +0200
Subject: [PATCH] build: harden build_doc.yml permissions Signed-off-by: Alex
 <aleksandrosansan@gmail.com>

---
 .github/workflows/build_doc.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/build_doc.yml b/.github/workflows/build_doc.yml
index 8a238305b81..d1d6fb4828f 100644
--- a/.github/workflows/build_doc.yml
+++ b/.github/workflows/build_doc.yml
@@ -4,9 +4,16 @@ on:
   issue_comment:
       types: [created]
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   build:
 
+    permissions:
+      contents: read # to fetch code (actions/checkout)
+      issues: write # to create comment
+
     runs-on: ubuntu-latest
     steps:
       - uses: actions/github-script@v6