bump(ci): labeler action security updates (#474)

lightbend · Mar 27, 2023 · fb354ba · fb354ba
1 parent 5550efe
commit fb354ba
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
@@ -7,7 +7,12 @@ on:
 jobs:
   triage:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
-      - uses: actions/labeler@v3
+      # https://github.com/actions/labeler/releases
+      # v4.0.3
+      - uses: actions/labeler@ba790c862c380240c6d5e7427be5ace9a05c754b
         with:
           repo-token: "${{ secrets.GITHUB_TOKEN }}"