geoffsee/manifold-workflow-engine
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Set read permissions for workflows in tests and publish

Browse Source 
Added `contents: read` and `pull-requests: read` permissions to the `tests` and `publish` GitHub workflows. This enhances security by explicitly defining the required permissions for these jobs.
This commit is contained in:
Geoff Seemueller
2025-01-09 18:11:31 -05:00
parent 7db4ec2180
commit 36dc86ff8c
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/publish.yml vendored
View File

@@ -6,6 +6,9 @@ on:
jobs: jobs:
publish: publish:
permissions:
contents: read
pull-requests: read
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4

3
.github/workflows/tests.yml vendored
View File

@@ -9,6 +9,9 @@ on:
jobs: jobs:
tests: tests:
permissions:
contents: read
pull-requests: read
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4