From 52802bda2779e7624b3e896ed2a270f1bdc75f9f Mon Sep 17 00:00:00 2001
From: Alex Boten <223565+codeboten@users.noreply.github.com>
Date: Mon, 23 Dec 2024 10:51:07 -0800
Subject: [PATCH] [chore] update permissions to read only (#11974)

This workflow only needs read access.

Signed-off-by: Alex Boten <223565+codeboten@users.noreply.github.com>
---
 .github/workflows/check-merge-freeze.yml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/check-merge-freeze.yml b/.github/workflows/check-merge-freeze.yml
index d30fa39495b..a1eaf21130e 100644
--- a/.github/workflows/check-merge-freeze.yml
+++ b/.github/workflows/check-merge-freeze.yml
@@ -2,11 +2,22 @@ name: Merge freeze
 
 on:
   pull_request:
-    types: [opened, ready_for_review, synchronize, reopened, labeled, unlabeled, enqueued]
+    types:
+      [
+        opened,
+        ready_for_review,
+        synchronize,
+        reopened,
+        labeled,
+        unlabeled,
+        enqueued,
+      ]
     branches: [main]
   merge_group:
     types: [checks_requested]
 
+permissions: read-all
+
 jobs:
   check-merge-freeze:
     name: Check