Skip to content

Commit e8de795

Browse files
authored
security: add permissions block to workflows (#234)
* security: add permissions block to workflows * Add permissions
1 parent c8c027f commit e8de795

File tree

4 files changed

+16
-0
lines changed

4 files changed

+16
-0
lines changed

.github/workflows/addToProject.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,9 @@ on:
77
env:
88
MY_GITHUB_TOKEN: ${{ secrets.APM_TECH_USER_TOKEN }}
99

10+
permissions:
11+
contents: read
12+
1013
jobs:
1114
assign_one_project:
1215
runs-on: ubuntu-latest

.github/workflows/labeler.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,11 @@ on:
77
env:
88
MY_GITHUB_TOKEN: ${{ secrets.APM_TECH_USER_TOKEN }}
99

10+
permissions:
11+
contents: read
12+
issues: write
13+
pull-requests: write
14+
1015
jobs:
1116
triage:
1217
runs-on: ubuntu-latest

.github/workflows/snapshot.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,9 @@ on:
1212
default: false
1313
type: boolean
1414

15+
permissions:
16+
contents: read
17+
1518
jobs:
1619
validate:
1720
runs-on: ubuntu-latest

.github/workflows/test-reporter.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,11 @@ on:
88
types:
99
- completed
1010

11+
permissions:
12+
contents: read
13+
actions: read
14+
checks: write
15+
1116
jobs:
1217
report:
1318
runs-on: ubuntu-latest

0 commit comments

Comments
 (0)