[llvm] workflows/new-issues: Limit token to current repository (PR #228692)

[via llvm-commits]

llvmorg-github-actions[bot] wrote:


<!--LLVM PR SUMMARY COMMENT-->

@llvm/pr-subscribers-github-workflow

Author: Tom Stellard (tstellar)

<details>
<summary>Changes</summary>

The token had access to all llvm repositories which was unnecessary since it was only used for llvm-project.

https://github.com/llvm/llvm-project/security/code-scanning/1862

---
Full diff: https://github.com/llvm/llvm-project/pull/228692.diff


1 Files Affected:

- (modified) .github/workflows/new-issues.yml (+1) 


``````````diff
diff --git a/.github/workflows/new-issues.yml b/.github/workflows/new-issues.yml
index e3960c03e8959..9f7c6e74271a7 100644
--- a/.github/workflows/new-issues.yml
+++ b/.github/workflows/new-issues.yml
@@ -22,6 +22,7 @@ jobs:
           client-id: ${{ secrets.LLVM_TOKEN_GENERATOR_CLIENT_ID }}
           private-key: ${{ secrets.LLVM_TOKEN_GENERATOR_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
+          repositories: ${{ github.repository }}
           permission-contents: read
           permission-issues: write
       - uses: llvm/actions/issue-labeler at 89a8cf80982d830faab019237860b344a6390c30 # main

``````````

</details>


https://github.com/llvm/llvm-project/pull/228692