verify-what-permissions-are-needed

Author: consideRatio

.github/workflows/tests.yaml

@@ -9,9 +9,8 @@ on:
   workflow_dispatch:
 
 permissions:
+  # contents is required by actions/checkout
   contents: read
-  issues: read
-  pull-requests: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -51,8 +50,8 @@ jobs:
         include:
           # Only test oldest supported and latest python version to reduce
           # GitHub API calls, as they can get rate limited
-          - python-version: "3.10"
           - python-version: 3.x
+          - python-version: "3.10"
 
     steps:
       - uses: actions/checkout@v6