Minimal token permissions

See tokio-rs/tokio#5072
HdrHistogram · Mar 11, 2023 · a076ec1 · a076ec1
1 parent 9afb0e1
commit a076ec1
Show file tree

Hide file tree

Showing 5 changed files with 13 additions and 0 deletions.
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 on:
   push:
     branches: [main]
@@ -20,6 +22,9 @@ jobs:
   clippy:
     runs-on: ubuntu-latest
     name: ${{ matrix.toolchain }} / clippy
+    permissions:
+      contents: read
+      checks: write
     strategy:
       fail-fast: false
       matrix:

diff --git a/.github/workflows/nostd.yml b/.github/workflows/nostd.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 on:
   push:
     branches: [main]

diff --git a/.github/workflows/safety.yml b/.github/workflows/safety.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 on:
   push:
     branches: [main]

diff --git a/.github/workflows/scheduled.yml b/.github/workflows/scheduled.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 on:
   push:
     branches: [main]

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 on:
   push:
     branches: [main]