From f00d28e2bd5e69160b04be2191cbbf0db3a813a6 Mon Sep 17 00:00:00 2001 From: neilnaveen <42328488+neilnaveen@users.noreply.github.com> Date: Wed, 29 Jun 2022 03:43:37 -0500 Subject: Set minimum required permissions on GitHub Actions workflows. (#10004) --- .github/workflows/ci-linux.yml | 3 +++ .github/workflows/ci-macos.yml | 3 +++ .github/workflows/ci-windows.yml | 3 +++ .github/workflows/docs.yml | 3 +++ .github/workflows/hash.yml | 3 +++ .github/workflows/language.yml | 3 +++ 6 files changed, 18 insertions(+) diff --git a/.github/workflows/ci-linux.yml b/.github/workflows/ci-linux.yml index 4d6bcc1a518..abbbf10c130 100644 --- a/.github/workflows/ci-linux.yml +++ b/.github/workflows/ci-linux.yml @@ -20,6 +20,9 @@ on: - 'COPYING' - 'makefile' +permissions: + contents: read + jobs: build-linux: runs-on: ubuntu-latest diff --git a/.github/workflows/ci-macos.yml b/.github/workflows/ci-macos.yml index bab39b826da..7210f299c17 100644 --- a/.github/workflows/ci-macos.yml +++ b/.github/workflows/ci-macos.yml @@ -18,6 +18,9 @@ on: - 'COPYING' - 'makefile' +permissions: + contents: read + jobs: build-macos: runs-on: macOS-latest diff --git a/.github/workflows/ci-windows.yml b/.github/workflows/ci-windows.yml index a08f15b03ef..5026bdf8861 100644 --- a/.github/workflows/ci-windows.yml +++ b/.github/workflows/ci-windows.yml @@ -18,6 +18,9 @@ on: - 'COPYING' - 'makefile' +permissions: + contents: read + jobs: build-windows-gcc: diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 1f6aa78f1d5..532d8491d7b 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -10,6 +10,9 @@ on: - '.github/**' - 'docs/**' +permissions: + contents: read + jobs: build-docs: runs-on: ubuntu-latest diff --git a/.github/workflows/hash.yml b/.github/workflows/hash.yml index 94a6b24a298..7bc469ef7a0 100644 --- a/.github/workflows/hash.yml +++ b/.github/workflows/hash.yml @@ -14,6 +14,9 @@ on: - 'hash/*' - 'plugins/**' +permissions: + contents: read + jobs: validate: runs-on: ubuntu-latest diff --git a/.github/workflows/language.yml b/.github/workflows/language.yml index f73892ebf64..35e580e8bf5 100644 --- a/.github/workflows/language.yml +++ b/.github/workflows/language.yml @@ -10,6 +10,9 @@ on: - '.github/**' - 'language/**' +permissions: + contents: read + jobs: build-language: runs-on: ubuntu-latest -- cgit v1.2.3