ci: set content permissions as read

Signed-off-by: Artsiom Koltun <[email protected]>
opiproject · Jul 12, 2023 · cd533f9 · cd533f9
1 parent c9bba03
commit cd533f9
Show file tree

Hide file tree

Showing 6 changed files with 18 additions and 0 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -8,6 +8,9 @@ on:
  pull_request:
  branches: [ main ]
 
+permissions:
+ contents: read
+
 jobs:
  CodeQL-Build:
  runs-on: ubuntu-latest

diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
@@ -9,6 +9,9 @@ on:
  pull_request:
  branches: [ main ]
 
+permissions:
+ contents: read
+
 jobs:
  build:
 

diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
@@ -8,6 +8,9 @@ on:
  pull_request:
  branches: [ "main" ]
 
+permissions:
+ contents: read
+
 jobs:
 
  build:

diff --git a/.github/workflows/linters.yml b/.github/workflows/linters.yml
@@ -8,6 +8,9 @@ on:
  pull_request:
  branches: [ main ]
 
+permissions:
+ contents: read
+
 jobs:
  markdown-lint:
  runs-on: ubuntu-latest

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -5,6 +5,9 @@ on:
  release:
  types: [published]
 
+permissions:
+ contents: read
+
 jobs:
  release-docker:
  uses: ./.github/workflows/docker-publish.yml

diff --git a/.github/workflows/update-copyright-years-in-license-file.yml b/.github/workflows/update-copyright-years-in-license-file.yml
@@ -6,6 +6,9 @@ on:
  schedule:
  - cron: '0 3 1 1 *'
 
+permissions:
+ contents: read
+
 jobs:
  copyright:
  runs-on: ubuntu-latest