Restrict permissions for combine-prs job

bigdaz · bigdaz · commit 69215f1c52a9 · 2024-12-11T12:31:33.000-07:00
diff --git a/.github/workflows/ci-combine-bot-prs.yml b/.github/workflows/ci-combine-bot-prs.yml
@@ -3,21 +3,22 @@ name: Combine Bot PRs
 on:
   workflow_dispatch:
 
-# The minimum permissions required to run this Action
 permissions:
-  contents: write
-  pull-requests: write
-  checks: read
+  contents: read
 
 jobs:
   combine-wrapperbot-prs:
+    permissions:
+      contents: write
+      pull-requests: write
+      checks: read
     if: github.repository == 'gradle/actions'
     runs-on: ubuntu-latest
     steps:
       - name: combine-wrapperbot-prs
         uses: github/combine-prs@v5.2.0
         with:
           branch_prefix: wrapperbot
+          combine_branch_name: wrapperbot/combined-wrapper-updates
           pr_title: 'Bump Gradle Wrappers'
           ci_required: "false"
-          github_token: ${{ secrets.BOT_GITHUB_TOKEN }}
