External Release v2024.02.22

Assign permissions to GitHub actions
intelxed · Feb 25, 2024 · d08a6f6 · d08a6f6
1 parent 2b5c29a
commit d08a6f6
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/.github/workflows/external_release.yml b/.github/workflows/external_release.yml
@@ -1,6 +1,6 @@
 #BEGIN_LEGAL
 #
-#Copyright (c) 2022 Intel Corporation
+#Copyright (c) 2024 Intel Corporation
 #
 #  Licensed under the Apache License, Version 2.0 (the "License");
 #  you may not use this file except in compliance with the License.
@@ -16,6 +16,7 @@
 #  
 #END_LEGAL
 name: External release
+permissions: write-all
 on:
   push:
     branches:

diff --git a/.github/workflows/sanity_external.yml b/.github/workflows/sanity_external.yml
@@ -1,6 +1,6 @@
 #BEGIN_LEGAL
 #
-#Copyright (c) 2023 Intel Corporation
+#Copyright (c) 2024 Intel Corporation
 #
 #  Licensed under the Apache License, Version 2.0 (the "License");
 #  you may not use this file except in compliance with the License.
@@ -28,7 +28,7 @@ env:
   MIN_PY_VER: "3.8.17"
 ###########################################################
 
-
+permissions: read-all
 on:
   pull_request:
     branches:
@@ -117,6 +117,7 @@ jobs:
   # Malware scan
   anti_virus_scan:
     needs: init
+    permissions: write-all
     runs-on:
       - self-hosted
       - xed-runners
@@ -131,6 +132,7 @@ jobs:
 
   protex_scan:
     needs: init
+    permissions: write-all
     runs-on:
       - self-hosted
       - xed-runners
@@ -189,6 +191,7 @@ jobs:
 
   coverity_report:
     needs: [init, coverity_scan]
+    permissions: write-all
     runs-on:
       - self-hosted
       - xed-runners