build: harden workflow permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
Alex 2022-09-25 17:24:06 +02:00 committed by Eli Schwartz
parent fae24d86f5
commit 9074ad93c6
3 changed files with 9 additions and 0 deletions

View File

@ -18,6 +18,9 @@ on:
- ".github/workflows/cygwin.yml" - ".github/workflows/cygwin.yml"
- "run*tests.py" - "run*tests.py"
permissions:
contents: read
jobs: jobs:
test: test:
runs-on: windows-latest runs-on: windows-latest

View File

@ -23,6 +23,9 @@ on:
schedule: schedule:
- cron: '0 0 * * 0' - cron: '0 0 * * 0'
permissions:
contents: read
jobs: jobs:
build: build:
# do not run the weekly scheduled job in a fork # do not run the weekly scheduled job in a fork

View File

@ -19,6 +19,9 @@ on:
types: types:
- published - published
permissions:
contents: write # for release creation (svenstaro/upload-release-action)
# This job is copy/paster into wrapdb CI, please update it there when doing any # This job is copy/paster into wrapdb CI, please update it there when doing any
# change here. # change here.
jobs: jobs: