Set more specific GitHub token permissions on workflows. #491

	name: Run Integration Tests

	permissions:
	contents: read

	on: # yamllint disable-line rule:truthy
	pull_request:
	types:
	- labeled
	- unlabeled
	- opened
	- synchronize
	- reopened
	- ready_for_review

	concurrency:
	group: integration-${{ github.head_ref }}
	cancel-in-progress: true

	jobs:
	integration_tests:
	runs-on: ubuntu-latest
	if: github.event_name == 'pull_request' && github.event.pull_request.draft == false && contains(github.event.pull_request.labels.*.name, 'ci/integrations')
	steps:
	- name: Checkout code
	uses: actions/checkout@v3

	- name: Set up Python 3.7
	uses: actions/setup-python@v4
	with:
	python-version: "3.7"
	cache: "pip"

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install tox

	- name: Run integration tests
	run: tox -e integration -- --vcr-record=all
	env:
	DD_TEST_CLIENT_API_KEY: "${{ secrets.DD_TEST_CLIENT_API_KEY }}"
	DD_TEST_CLIENT_APP_KEY: "${{ secrets.DD_TEST_CLIENT_APP_KEY }}"
	DD_TEST_CLIENT_USER: "${{ secrets.DD_TEST_CLIENT_USER }}"

	- name: Run admin integration tests
	run: tox -e integration-admin -- --vcr-record=all
	env:
	DD_TEST_CLIENT_API_KEY: ${{ secrets.DD_TEST_CLIENT_API_KEY }}
	DD_TEST_CLIENT_APP_KEY: ${{ secrets.DD_TEST_CLIENT_APP_KEY }}
	DD_TEST_CLIENT_USER: ${{ secrets.DD_TEST_CLIENT_USER }}

Provide feedback