Update label-merge-conflicts.yml

dangoor · web-flow · commit 44c15b722f53 · 2025-05-28T12:34:18.000-04:00
Set permissions and pin the third party action.
diff --git a/.github/workflows/label-merge-conflicts.yml b/.github/workflows/label-merge-conflicts.yml
@@ -1,4 +1,8 @@
 name: "Check for conflicts"
+
+permissions:
+  contents: read
+
 on:
   push:
     branches:
@@ -11,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: check if PRs have conflicts
-        uses: eps1lon/actions-label-merge-conflict@releases/2.x
+        uses: eps1lon/actions-label-merge-conflict@fd1f295ee7443d13745804bc49fe158e240f6c6e
         with:
           dirtyLabel: "merge conflict"
           repoToken: "${{ secrets.GITHUB_TOKEN }}"
