From 2d86198d1beac74c4f20a943c34c212c60125dd2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Stefan=20P=C3=B6lz?=
 <38893694+Flash0ver@users.noreply.github.com>
Date: Tue, 10 Feb 2026 15:47:33 +0100
Subject: [PATCH] ci(danger): limit permissions

---
 .github/workflows/danger.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/danger.yml b/.github/workflows/danger.yml
index 1e4ffd9793..ca2f291a06 100644
--- a/.github/workflows/danger.yml
+++ b/.github/workflows/danger.yml
@@ -2,7 +2,12 @@ name: Danger
 
 on:
   pull_request:
-    types: [opened, synchronize, reopened, edited, ready_for_review]
+    types: [opened, synchronize, reopened, edited, ready_for_review, labeled, unlabeled]
+
+permissions:
+  contents: read
+  pull-requests: write
+  statuses: write
 
 jobs:
   danger: