diff options
| author | Alex <aleksandrosansan@gmail.com> | 2022-09-25 17:24:06 +0200 |
|---|---|---|
| committer | Eli Schwartz <eschwartz93@gmail.com> | 2022-11-30 23:18:14 -0500 |
| commit | 9074ad93c6675cdb603b85d85a8090100058f81b (patch) | |
| tree | 28ae7974a9e10482ef60859f90785afbb2f1835d | |
| parent | fae24d86f58ee178e1c344c99405e1a89dfd8964 (diff) | |
| download | meson-9074ad93c6675cdb603b85d85a8090100058f81b.zip meson-9074ad93c6675cdb603b85d85a8090100058f81b.tar.gz meson-9074ad93c6675cdb603b85d85a8090100058f81b.tar.bz2 | |
build: harden workflow permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
| -rw-r--r-- | .github/workflows/cygwin.yml | 3 | ||||
| -rw-r--r-- | .github/workflows/images.yml | 3 | ||||
| -rw-r--r-- | .github/workflows/website.yml | 3 |
3 files changed, 9 insertions, 0 deletions
diff --git a/.github/workflows/cygwin.yml b/.github/workflows/cygwin.yml index d95c7b3..5b1cd95 100644 --- a/.github/workflows/cygwin.yml +++ b/.github/workflows/cygwin.yml @@ -18,6 +18,9 @@ on: - ".github/workflows/cygwin.yml" - "run*tests.py" +permissions: + contents: read + jobs: test: runs-on: windows-latest diff --git a/.github/workflows/images.yml b/.github/workflows/images.yml index 655d478..dd4fe9a 100644 --- a/.github/workflows/images.yml +++ b/.github/workflows/images.yml @@ -23,6 +23,9 @@ on: schedule: - cron: '0 0 * * 0' +permissions: + contents: read + jobs: build: # do not run the weekly scheduled job in a fork diff --git a/.github/workflows/website.yml b/.github/workflows/website.yml index 3fac07f..3b1d517 100644 --- a/.github/workflows/website.yml +++ b/.github/workflows/website.yml @@ -19,6 +19,9 @@ on: types: - published +permissions: + contents: write # for release creation (svenstaro/upload-release-action) + # This job is copy/paster into wrapdb CI, please update it there when doing any # change here. jobs: |