Skip to content

Commit ded23f5

Browse files
committed
Add permissions for read access to contents in workflow files
1 parent cca167b commit ded23f5

7 files changed

Lines changed: 24 additions & 0 deletions

File tree

.github/workflows/after-release.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,9 @@ on:
77
types: [after-release]
88
workflow_dispatch:
99

10+
permissions:
11+
contents: read
12+
1013
jobs:
1114
notify:
1215
uses: gofiber/.github/.github/workflows/after-release.yml@main

.github/workflows/auto-labeler.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,10 @@ on:
55
pull_request_target:
66
types: [opened, edited, reopened, synchronize]
77
workflow_dispatch:
8+
9+
permissions:
10+
contents: read
11+
812
jobs:
913
auto-labeler:
1014
uses: gofiber/.github/.github/workflows/auto-labeler.yml@main

.github/workflows/benchmark.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,9 @@ on:
1515
- "!docs/**"
1616
- "!**.md"
1717

18+
permissions:
19+
contents: read
20+
1821
jobs:
1922
Compare:
2023
runs-on: ubuntu-latest

.github/workflows/cleanup-release-draft.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,9 @@ on:
99
type: string
1010
default: ''
1111

12+
permissions:
13+
contents: read
14+
1215
jobs:
1316
cleanup:
1417
runs-on: ubuntu-latest

.github/workflows/codeql-analysis.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,10 @@ on:
99
schedule:
1010
- cron: '0 3 * * 6'
1111

12+
permissions:
13+
security-events: write
14+
contents: read
15+
1216
jobs:
1317
analyse:
1418
name: Analyse

.github/workflows/dependabot-on-demand.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,9 @@ on:
55
types: [trigger-dependabot]
66
workflow_dispatch:
77

8+
permissions:
9+
contents: read
10+
811
jobs:
912
trigger:
1013
uses: gofiber/.github/.github/workflows/dependabot-on-demand.yml@main

.github/workflows/test.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,10 @@ on:
1414
- "!**.md"
1515

1616
name: Test
17+
18+
permissions:
19+
contents: read
20+
1721
jobs:
1822
Build:
1923
strategy:

0 commit comments

Comments
 (0)