IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

DEV: Set permissions for GitHub actions (#17733)

Browse Source 
Included permissions for the action.

https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Co-authored-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
This commit is contained in:
Jarek Radosz 2022-07-30 17:22:03 +02:00 committed by GitHub
parent e58c25939c
commit 89d43235c4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/licenses.yml vendored
View File

@ -10,6 +10,9 @@ concurrency:
group: licenses-${{ format('{0}-{1}', github.head_ref || github.run_number, github.job) }} group: licenses-${{ format('{0}-{1}', github.head_ref || github.run_number, github.job) }}
cancel-in-progress: true cancel-in-progress: true
permissions:
contents: read
jobs: jobs:
build: build:
name: run name: run

3
.github/workflows/linting.yml vendored
View File

@ -10,6 +10,9 @@ concurrency:
group: linting-${{ format('{0}-{1}', github.head_ref || github.run_number, github.job) }} group: linting-${{ format('{0}-{1}', github.head_ref || github.run_number, github.job) }}
cancel-in-progress: true cancel-in-progress: true
permissions:
contents: read
jobs: jobs:
build: build:
name: run name: run

3
.github/workflows/tests.yml vendored
View File

@ -12,6 +12,9 @@ concurrency:
group: tests-${{ format('{0}-{1}', github.head_ref || github.run_number, github.job) }} group: tests-${{ format('{0}-{1}', github.head_ref || github.run_number, github.job) }}
cancel-in-progress: true cancel-in-progress: true
permissions:
contents: read
jobs: jobs:
build: build:
name: ${{ matrix.target }} ${{ matrix.build_type }} name: ${{ matrix.target }} ${{ matrix.build_type }}