Moved workflow permissions to job level

adamlui · adamlui · commit 99fc21edf9ad · 2026-01-16T23:39:35.000-08:00
diff --git a/.github/workflows/lint-on-push-pr.yml b/.github/workflows/lint-on-push-pr.yml
@@ -1,14 +1,14 @@
 name: Lint pushes/PRs
 on: [push, pull_request]
 
-permissions:
-  contents: read
-
 jobs:
 
   eslint:
     name: ESLint
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
     steps:
 
       - name: Checkout repository code
diff --git a/.github/workflows/sync-amazongpt-changes-to-repos.yml b/.github/workflows/sync-amazongpt-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [chatgpt/amazongpt/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-autoclear-chatgpt-history-changes-to-repos.yml b/.github/workflows/sync-autoclear-chatgpt-history-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [chatgpt/autoclear-chatgpt-history/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-bravegpt-changes-to-repos.yml b/.github/workflows/sync-bravegpt-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [chatgpt/bravegpt/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-bump-script-changes-to-ai-web.yml b/.github/workflows/sync-bump-script-changes-to-ai-web.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [utils/bump/chatbots.js, utils/bump/resources.js]
 
-permissions:
-  contents: read
-
 jobs:
   sync-bump-scripts:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-changes-to-gitlab.yml b/.github/workflows/sync-changes-to-gitlab.yml
@@ -4,13 +4,12 @@ on:
   push:
     branches: [master]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-chatgpt-auto-continue-changes-to-repos.yml b/.github/workflows/sync-chatgpt-auto-continue-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [chatgpt/chatgpt-auto-continue/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-chatgpt-auto-refresh-changes-to-repos.yml b/.github/workflows/sync-chatgpt-auto-refresh-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [chatgpt/chatgpt-auto-refresh/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-chatgpt-auto-talk-changes-to-repos.yml b/.github/workflows/sync-chatgpt-auto-talk-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [chatgpt/chatgpt-auto-talk/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-chatgpt-infinity-changes-to-repos.yml b/.github/workflows/sync-chatgpt-infinity-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [chatgpt/chatgpt-infinity/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-chatgpt-widescreen-changes-to-repos.yml b/.github/workflows/sync-chatgpt-widescreen-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [chatgpt/chatgpt-widescreen/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-duckduckgpt-changes-to-repos.yml b/.github/workflows/sync-duckduckgpt-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [chatgpt/duckduckgpt/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-github-star-history-changes-to-repos.yml b/.github/workflows/sync-github-star-history-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [github/github-star-history/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-github-widescreen-changes-to-repos.yml b/.github/workflows/sync-github-widescreen-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [github/github-widescreen/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-googlegpt-changes-to-repos.yml b/.github/workflows/sync-googlegpt-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [chatgpt/googlegpt/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/sync-youtube-classic-changes-to-repos.yml b/.github/workflows/sync-youtube-classic-changes-to-repos.yml
@@ -5,13 +5,12 @@ on:
     branches: [master]
     paths: [youtube-classic/**]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     if: (github.repository == 'adamlui/userscripts') && (github.event.commits[0].committer.username != 'kudo-sync-bot')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/update-chatgpt-usercount-jsd-shields-weekly.yml b/.github/workflows/update-chatgpt-usercount-jsd-shields-weekly.yml
@@ -4,12 +4,11 @@ on:
   schedule:
     - cron: "45 1 * * 5" # every Fri @ 1:45 AM
 
-permissions:
-  contents: read
-
 jobs:
   update-chatgpt-usercount-jsd-shields:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
diff --git a/.github/workflows/update-root-usercount-jsd-shields-weekly.yml b/.github/workflows/update-root-usercount-jsd-shields-weekly.yml
@@ -5,12 +5,11 @@ on:
     - cron: "35 1 * * 3" # every Wed @ 1:35 AM
   workflow_dispatch:
 
-permissions:
-  contents: read
-
 jobs:
   update-root-usercount-jsd-shields:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     env:
       TZ: PST8PDT
 
