From 5699d2a952142aab609f3d1b14dd98654c6e1b34 Mon Sep 17 00:00:00 2001
From: Alban Bailly <abailly@akamai.com>
Date: Tue, 10 Oct 2023 14:41:47 -0400
Subject: [PATCH] permissions

---
 .github/workflows/coverage_test.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/coverage_test.yml b/.github/workflows/coverage_test.yml
index e65ec51c66d..204ed8edb93 100644
--- a/.github/workflows/coverage_test.yml
+++ b/.github/workflows/coverage_test.yml
@@ -1,6 +1,6 @@
 name: Code Coverage
 
-on: [pull_request_target]
+on: [pull_request]
 
 jobs:
   base_branch_coverage:
@@ -29,6 +29,10 @@ jobs:
   checks:
     runs-on: ubuntu-latest
     needs: base_branch_coverage
+    permissions:
+      issues: write
+      pull-requests: write
+      contents: write
     steps:
       - uses: actions/checkout@v3 # Checkout the PR branch
       - name: Use Node.js v18.14.0