github/workflows: set top-level file permissions

The gh-workflow-approve and tests_windows actions didnt't specify top-level permissions. This is an improvement towards having a better OpenSSF Scorecard Report score. Signed-off-by: Ivan Valdes <[email protected]>
etcd-io · Aug 2, 2024 · 83aba89 · 83aba89
1 parent b87f244
commit 83aba89
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/.github/workflows/gh-workflow-approve.yaml b/.github/workflows/gh-workflow-approve.yaml
@@ -1,6 +1,6 @@
 ---
 name: Approve GitHub Workflows
-
+permissions: read-all
 on:
   pull_request_target:
     types:

diff --git a/.github/workflows/tests_windows.yml b/.github/workflows/tests_windows.yml
@@ -1,6 +1,7 @@
 ---
 name: Tests
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test-windows:
     strategy: