Apply suggestion from @edenhaus

Limit stale workflow app token permissions
Update zizmor
2026-05-28 11:43:16 +02:00 · 2026-05-27 16:06:48 +02:00 · 2026-05-27 12:01:31 +00:00 · 2026-05-26 21:05:53 +00:00
3 changed files with 5 additions and 4 deletions
@@ -55,9 +55,10 @@ jobs:
      - name: Generate app token
        id: token
        # Pinned to a specific version of the action for security reasons
-        # v3.2.0
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
        with:
+          permission-issues: write
+          permission-pull-requests: write
          app-id: ${{ secrets.ISSUE_TRIAGE_APP_ID }} # zizmor: ignore[secrets-outside-env]
          private-key: ${{ secrets.ISSUE_TRIAGE_APP_PEM }} # zizmor: ignore[secrets-outside-env]

@@ -18,7 +18,7 @@ repos:
        exclude_types: [csv, json, html]
        exclude: ^tests/fixtures/|homeassistant/generated/|tests/components/.*/snapshots/
  - repo: https://github.com/zizmorcore/zizmor-pre-commit
-    rev: v1.24.1
+    rev: v1.25.2
    hooks:
      - id: zizmor
        args:
@@ -3,4 +3,4 @@
 codespell==2.4.2
 ruff==0.15.13
 yamllint==1.38.0
-zizmor==1.24.1
+zizmor==1.25.2
Author	SHA1	Message	Date
Robert Resch	61edf4b0eb	Apply suggestion from @edenhaus	2026-05-27 16:06:48 +02:00
copilot-swe-agent[bot]	759429a9d9	Limit stale workflow app token permissions	2026-05-27 12:01:31 +00:00
renovate[bot]	8ca7ab7957	Update zizmor	2026-05-26 21:05:53 +00:00