From 2e43b5628456e0ee7a5b610f22f129b0b8958bfa Mon Sep 17 00:00:00 2001
From: Denis Kasak <dkasak@termina.org.uk>
Date: Mon, 6 Jul 2026 20:19:56 +0200
Subject: [PATCH] Fix broad permissions in the triage-incoming.yml workflow

---
 .github/workflows/triage-incoming.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/triage-incoming.yml b/.github/workflows/triage-incoming.yml
index 1d291a319b..51f7003663 100644
--- a/.github/workflows/triage-incoming.yml
+++ b/.github/workflows/triage-incoming.yml
@@ -4,6 +4,10 @@ on:
   issues:
     types: [ opened ]
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
   triage:
     uses: matrix-org/backend-meta/.github/workflows/triage-incoming.yml@18beaf3c8e536108bd04d18e6c3dc40ba3931e28 # v2.0.3