review

Author: trask

.github/workflows/rerun-failed-daily-jobs.yml

@@ -14,11 +14,13 @@ concurrency:
   cancel-in-progress: false
 
 permissions:
-  actions: write
   contents: read
 
 jobs:
   rerun-failed-jobs:
+    permissions:
+      contents: read
+      actions: write
     runs-on: ubuntu-latest
     timeout-minutes: 10
     if: github.event.workflow_run.conclusion == 'failure'
@@ -29,4 +31,4 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
           WORKFLOW_RUN_ID: ${{ github.event.workflow_run.id }}
-        run: python .github/scripts/rerun-failed-workflow-jobs.py
+        run: python .github/scripts/rerun-failed-workflow-jobs.py