AlphaNen · Oct 21, 2026 · Oct 23, 2026
@@ -19,6 +19,8 @@ on:
       - closed
       - labeled
 
+permissions: {}
+
 jobs:
   backport:
     uses: dapr/.github/.github/workflows/backport.yaml@main

@@ -6,6 +6,9 @@ on:
       - v*
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     runs-on: ubuntu-latest

@@ -13,6 +13,9 @@ on:
   workflow_dispatch:
   merge_group:
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     runs-on: ubuntu-latest

@@ -18,6 +18,8 @@ on:
     - cron: '*/10 * * * *'
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   automerge:
     uses: dapr/.github/.github/workflows/automerge.yaml@main

@@ -3,6 +3,8 @@ name: dapr-bot
 on:
   issue_comment: {types: created}
 
+permissions: {}
+
 jobs:
   daprbot:
     name: bot-processor

@@ -28,6 +28,10 @@ on:
       - release-*
       - feature/*
   workflow_dispatch: {}
+
+permissions:
+  contents: read
+
 jobs:
   fossa-scan:
     if: github.repository_owner == 'dapr' # FOSSA is not intended to run on forks.

@@ -29,11 +29,12 @@ concurrency:
   group: release-tag-${{ github.ref }}
   cancel-in-progress: false
 
+permissions:
+  contents: read
+
 jobs:
   tag:
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
     steps:
     - uses: actions/checkout@v7
       with:

@@ -25,6 +25,10 @@ on:
   repository_dispatch:
     types: [validate-examples]
   merge_group:
+
+permissions:
+  contents: read
+
 jobs:
   validate:
     runs-on: ubuntu-latest
-Original file line number
+Diff line change
@@ Expand Up / @@ -19,6 +19,8 @@ on: @@
           - closed
           - labeled
+    permissions: {}
     jobs:
       backport:
         uses: dapr/.github/.github/workflows/backport.yaml@main
@@ Expand Down @@