From 8ab2a6aedccfa6b44142c2e3f68c9d1b4d33ff24 Mon Sep 17 00:00:00 2001
From: Gerald Morrison <gerald.gm.morrison@gmail.com>
Date: Wed, 19 Feb 2025 12:09:06 +0100
Subject: [PATCH] add permissions

---
 .github/workflows/dispatch-e2e.yaml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/dispatch-e2e.yaml b/.github/workflows/dispatch-e2e.yaml
index 33c5789a..13c2ad7d 100644
--- a/.github/workflows/dispatch-e2e.yaml
+++ b/.github/workflows/dispatch-e2e.yaml
@@ -4,6 +4,8 @@ on:
   push:
       branches:
       - main
+permissions:
+  contents: read
 
 jobs:
   dispatch-event:
@@ -11,12 +13,12 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@v2
+        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a
         with:
           app_id: ${{ secrets.OCMBOT_APP_ID }}
           private_key: ${{ secrets.OCMBOT_PRIV_KEY }}
       - name: Dispatch e2e test trigger
-        uses: peter-evans/repository-dispatch@v3
+        uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0
         with:
           token: ${{ steps.generate_token.outputs.token }}
           repository: open-component-model/MPAS