Skip to content

Commit

Permalink
Merge pull request #3983 from gkunz/token-permissions-check-actions
Browse files Browse the repository at this point in the history
[check actions] setting GITHUB_TOKEN permissions to read
  • Loading branch information
bruntib authored Aug 24, 2023
2 parents 0028f5f + 27656fb commit d0730b9
Show file tree
Hide file tree
Showing 5 changed files with 10 additions and 0 deletions.
2 changes: 2 additions & 0 deletions .github/workflows/config_coverage.yml
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,8 @@ on:
# Allow running this job manually from either API or GitHub UI.
workflow_dispatch:

permissions: read-all

jobs:
checker-config-coverage:
name: "Config coverage of checkers"
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/docker.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,8 @@ on:
release:
types: [published]

permissions: read-all

jobs:
main:
runs-on: ubuntu-latest
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/pypi.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,8 @@ on:
release:
types: [published]

permissions: read-all

jobs:
build:
name: Build pypi package
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/snap.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,8 @@ on:
release:
types: [published]

permissions: read-all

jobs:
build:
name: Build snap package
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,8 @@ name: codechecker-tests
# Triggers the workflow on push or pull request events.
on: [push, pull_request]

permissions: read-all

jobs:
# Note: UI related linter tests will run in the gui job.
lint:
Expand Down

0 comments on commit d0730b9

Please sign in to comment.