Skip to content

Commit 438e517

Browse files
committed
ci: Add missing workflow permissions.
1 parent 757ced1 commit 438e517

5 files changed

Lines changed: 18 additions & 0 deletions

File tree

.github/workflows/brakeman.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,10 @@ on:
66
branches:
77
- main
88

9+
permissions:
10+
contents: read
11+
security-events: write
12+
913
jobs:
1014
brakeman:
1115
runs-on: ubuntu-latest

.github/workflows/codeql.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,10 @@ on:
1010
schedule:
1111
- cron: '45 13 * * *'
1212

13+
permissions:
14+
contents: read
15+
security-events: write
16+
1317
jobs:
1418
analyze:
1519
name: Analyze (${{ matrix.language }})

.github/workflows/lint.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,9 @@ on:
66
branches:
77
- main
88

9+
permissions:
10+
contents: read
11+
912
jobs:
1013
lint:
1114
runs-on: ubuntu-latest

.github/workflows/rspec.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,9 @@ on:
66
branches:
77
- main
88

9+
permissions:
10+
contents: read
11+
912
jobs:
1013
test:
1114
runs-on: ubuntu-latest

.github/workflows/trivy.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,10 @@ on:
66
branches:
77
- main
88

9+
permissions:
10+
contents: read
11+
security-events: write
12+
913
jobs:
1014
trivy:
1115
runs-on: ubuntu-latest

0 commit comments

Comments
 (0)