move workflow permissions to job level

open-thought · Feb 6, 2025 · 5da9d9a · 5da9d9a
1 parent 9ed1fd1
commit 5da9d9a
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
@@ -1,16 +1,15 @@
 name:  Pre-commit Checks
 
-permissions:
-  contents: read
-  pull-requests: write
-
 on:
   pull_request:
     branches: [ main ]
 
 jobs:
   pre-commit:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write  # This is needed for commenting on PRs
     steps:
     - uses: actions/checkout@v4
     - uses: actions/setup-python@v4