From 8115197c639c32cde76baf01f28d4cd47570cf66 Mon Sep 17 00:00:00 2001
From: Connor Glynn <66882795+connormaglynn@users.noreply.github.com>
Date: Wed, 18 Oct 2023 10:52:07 +0100
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=90=20Reduce=20permissions=20in=20`doc?=
 =?UTF-8?q?umentation.yml`=20workflow=20(#208)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/documentation.yml | 24 ++++++++++++++----------
 1 file changed, 14 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
index c67074d..f748c88 100644
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -5,18 +5,22 @@ on:
     branches:
       - main
 
+permissions: { }
+
 jobs:
   docs:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
-    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
-      with:
-        ref: ${{ github.event.pull_request.head.ref }}
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
 
-    - name: Render terraform docs and push changes back to PR
-      uses: terraform-docs/gh-actions@f6d59f89a280fa0a3febf55ef68f146784b20ba0 # v1.0.0
-      with:
-        working-dir: .
-        output-file: README.md
-        output-method: inject
-        git-push: "true"
\ No newline at end of file
+      - name: Render terraform docs and push changes back to PR
+        uses: terraform-docs/gh-actions@f6d59f89a280fa0a3febf55ef68f146784b20ba0 # v1.0.0
+        with:
+          working-dir: .
+          output-file: README.md
+          output-method: inject
+          git-push: "true"