add permissions on job level

NixOS · Dec 15, 2023 · bae3c2b · bae3c2b
1 parent 47be457
commit bae3c2b
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/.github/workflows/update-flake-lock.yml b/.github/workflows/update-flake-lock.yml
@@ -4,12 +4,13 @@ on:
   schedule:
     # daily
     - cron: "0 0 * * *"
-permissions:
-  contents: write
-  pull-requests: write
+permissions: {}
 jobs:
   update-flake-lock:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - uses: DeterminateSystems/nix-installer-action@cd46bde16ab981b0a7b2dce0574509104543276e # v9