Add toplevel permissions

tstellar · tstellar · commit 7af7d12b0515 · 2023-10-30T13:07:38.000-07:00
diff --git a/.github/workflows/new-prs.yml b/.github/workflows/new-prs.yml
@@ -1,4 +1,8 @@
 name: "Labelling new pull requests"
+
+permissions:
+  contents: read
+
 on:
   # It's safe to use pull_request_target here, because we aren't checking out
   # code from the pull request branch.
