Merge pull request #400 from jigpu/action-permissions

github: Minimize permissions granted to automated workflows / jobs
linuxwacom · Nov 30, 2023 · 8f49546 · 8f49546
2 parents d212d14 + 0e060fb
commit 8f49546
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 0 deletions.
diff --git a/.github/workflows/checkpatch.yml b/.github/workflows/checkpatch.yml
@@ -4,6 +4,9 @@ on:
     - '3.17/**'
     - '4.5/**'
 
+permissions:
+  contents: read
+
 jobs:
   checkpatch:
     runs-on: ubuntu-20.04

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -1,5 +1,8 @@
 on: [ push, pull_request ]
 
+permissions:
+  contents: read
+
 env:
   COMPILE_CFLAGS: -Werror
   PREPARE_CFLAGS:

diff --git a/.github/workflows/tagged-release.yml b/.github/workflows/tagged-release.yml
@@ -6,10 +6,15 @@ on:
     tags:
       - "v*"
 
+permissions:
+  contents: read
+
 jobs:
   tagged-release:
     name: "Tagged Release"
     runs-on: "ubuntu-latest"
+    permissions:
+      contents: write
 
     steps:
       # ...