Skip to content

Commit 6e69607

Browse files
authored
CI: Explicitly set the permissions for GH actions (DistroAV#1473)
1 parent 586fe9e commit 6e69607

3 files changed

Lines changed: 8 additions & 0 deletions

File tree

.github/workflows/dispatch.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,3 +16,7 @@ jobs:
1616
if: inputs.job == 'build'
1717
uses: ./.github/workflows/build-project.yaml
1818
secrets: inherit
19+
permissions:
20+
actions: read
21+
contents: read
22+
pull-requests: read

.github/workflows/pr-pull.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,4 +24,6 @@ jobs:
2424
uses: ./.github/workflows/build-project.yaml
2525
secrets: inherit
2626
permissions:
27+
actions: read
2728
contents: read
29+
pull-requests: read

.github/workflows/push.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,9 @@ jobs:
2323
uses: ./.github/workflows/build-project.yaml
2424
secrets: inherit
2525
permissions:
26+
actions: read
2627
contents: read
28+
pull-requests: read
2729

2830
create-release:
2931
name: Create Release 🛫

0 commit comments

Comments
 (0)