build: harden dependency-graph.yml permissions

sashashura · sashashura · commit 9d9e9e5c53e2 · 2022-09-25T19:13:42.000+02:00
Signed-off-by: Alex &lt;aleksandrosansan@gmail.com&gt;
diff --git a/.github/workflows/dependency-graph.yml b/.github/workflows/dependency-graph.yml
@@ -3,8 +3,12 @@ name: Submit Dependency Graph
 on:
   push:
     branches: [1.7.x] # default branch of the project
+permissions: {}
 jobs:
   submit-graph:
+    permissions:
+      contents: write # to submit the dependency graph
+
     name: Submit Dependency Graph
     runs-on: ubuntu-latest # or windows-latest, or macOS-latest
     steps:
