From abd7f502858c64de9bbe110a3d69b95960b6cb62 Mon Sep 17 00:00:00 2001
From: Abel Soares Siqueira <abel.s.siqueira@gmail.com>
Date: Tue, 8 Feb 2022 09:33:00 +0100
Subject: [PATCH] Remove unneeded permissions of GitHub action that validates
 CITATION.cff

---
 .github/workflows/cffconvert.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/cffconvert.yml b/.github/workflows/cffconvert.yml
index 707a71c4b20fe..c5eb8404bbbf9 100644
--- a/.github/workflows/cffconvert.yml
+++ b/.github/workflows/cffconvert.yml
@@ -5,6 +5,9 @@ on:
     paths:
       - CITATION.cff
 
+permissions:
+  contents: read
+
 jobs:
   validate:
     name: "validate"
@@ -12,6 +15,8 @@ jobs:
     steps:
       - name: Check out a copy of the repository
         uses: actions/checkout@v2
+        with:
+          persist-credentials: false
 
       - name: Check whether the citation metadata from CITATION.cff is valid
         uses: citation-file-format/cffconvert-github-action@2.0.0