Skip to content

Commit 4fa2157

Browse files
authored
ci: scope down GitHub Token permissions (#154)
* ci: scope down permissions for release.yml * ci: scope down permissions for integ-tests.yml * ci: scope down permissions for check-binaries.yml
1 parent f9bf927 commit 4fa2157

File tree

3 files changed

+9
-0
lines changed

3 files changed

+9
-0
lines changed

.github/workflows/check-binaries.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,9 @@ on:
55
schedule:
66
- cron: "0 16 * * 1-5" # min h d Mo DoW / 9am PST M-F
77

8+
permissions:
9+
issues: write
10+
811
jobs:
912
check-for-vulnerabilities:
1013
runs-on: ubuntu-latest

.github/workflows/integ-tests.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,9 @@ on:
66
- develop
77
- main
88

9+
permissions:
10+
contents: read
11+
912
jobs:
1013
go-tests:
1114
runs-on: ubuntu-latest

.github/workflows/release.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,9 @@ on:
1111
description: "Information about the release"
1212
required: true
1313
default: "New release"
14+
permissions:
15+
contents: write
16+
1417
jobs:
1518
Release:
1619
environment: Release

0 commit comments

Comments
 (0)