From 0376eae0b58b2ba5feb6031b8b80653aebd8cb2a Mon Sep 17 00:00:00 2001
From: Claas Augner <caugner@mozilla.com>
Date: Thu, 16 Oct 2025 16:54:42 +0200
Subject: [PATCH] ci(workflows): assign explicit permissions

---
 .github/workflows/auto-merge.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 2a0d76bb..74097ffd 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -3,6 +3,9 @@ name: auto-merge
 on:
   pull_request_target:
 
+# No GITHUB_TOKEN permissions, as we use AUTOMERGE_TOKEN instead.
+permissions: {}
+
 jobs:
   auto-merge:
     uses: mdn/workflows/.github/workflows/auto-merge.yml@main