build: add permissions to all workflows

clambin · Jan 11, 2025 · 24e2877 · 24e2877
1 parent 3474f5d
commit 24e2877
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 7 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -1,13 +1,10 @@
 name: Release
-
 on:
   push:
     tags:
     - 'v*'
-
 permissions:
   contents: write
-
 jobs:
   test:
     uses: clambin/workflows/.github/workflows/test.yaml@main

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -1,9 +1,9 @@
 name: Test
-
 on:
   push:
   pull_request_target:
-
+permissions:
+  contents: read
 jobs:
   test:
     uses: clambin/workflows/.github/workflows/test.yaml@main

diff --git a/.github/workflows/vulnerabilities.yaml b/.github/workflows/vulnerabilities.yaml
@@ -1,10 +1,10 @@
 name: Vulnerabilities
-
 on:
   push:
   schedule:
     - cron: '23 3 * * 6'
-
+permissions:
+  contents: read
 jobs:
   vulnerabilities:
     uses: clambin/workflows/.github/workflows/vulnerabilities.yaml@main