add permissions definition and github token to automatus workflows

because new version of delete-artifact requires it
ComplianceAsCode · Jan 24, 2024 · c0503f6 · c0503f6
1 parent 8a18abf
commit c0503f6
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/automatus-cs8.yaml b/.github/workflows/automatus-cs8.yaml
@@ -63,6 +63,8 @@ jobs:
   validate-ubuntu:
     name: Run Tests
     needs: build-content
+    permissions:
+      actions: write
     runs-on: ubuntu-20.04
     steps:
       - name: Install Deps
@@ -172,6 +174,7 @@ jobs:
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         uses: geekyeggo/delete-artifact@v4
         with:
+          token: ${{ github.token }}
           name: ${{ env.DATASTREAM }}
           useGlob: false
       - name: Fail in case of ERROR present in logs_bash/test_suite.log or logs_ansible/test_suite.log

diff --git a/.github/workflows/automatus-cs9.yaml b/.github/workflows/automatus-cs9.yaml
@@ -63,6 +63,8 @@ jobs:
   validate-ubuntu:
     name: Run Tests
     needs: build-content
+    permissions:
+      actions: write
     runs-on: ubuntu-20.04
     steps:
       - name: Install Deps
@@ -172,6 +174,7 @@ jobs:
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         uses: geekyeggo/delete-artifact@v4
         with:
+          token: ${{ github.token }}
           name: ${{ env.DATASTREAM }}
           useGlob: false
       - name: Fail in case of ERROR present in logs_bash/test_suite.log or logs_ansible/test_suite.log

diff --git a/.github/workflows/automatus-sle15.yaml b/.github/workflows/automatus-sle15.yaml
@@ -71,6 +71,8 @@ jobs:
   validate-ubuntu:
     name: Run Tests
     needs: build-content
+    permissions:
+      actions: write
     runs-on: ubuntu-20.04
     steps:
       - name: Install Deps
@@ -180,6 +182,7 @@ jobs:
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         uses: geekyeggo/delete-artifact@v4
         with:
+          token: ${{ github.token }}
           name: ${{ env.DATASTREAM }}
           useGlob: false
       - name: Fail in case of ERROR present in logs_bash/test_suite.log or logs_ansible/test_suite.log

diff --git a/.github/workflows/automatus.yaml b/.github/workflows/automatus.yaml
@@ -61,6 +61,8 @@ jobs:
   validate-ubuntu:
     name: Run Tests
     needs: build-content
+    permissions:
+      actions: write
     runs-on: ubuntu-20.04
     steps:
       - name: Install Deps
@@ -170,6 +172,7 @@ jobs:
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         uses: geekyeggo/delete-artifact@v4
         with:
+          token: ${{ github.token }}
           name: ssg-${{steps.product.outputs.prop}}-ds.xml
           useGlob: false
       - name: Fail in case of ERROR present in logs_bash/test_suite.log or logs_ansible/test_suite.log