fix: code scanning alerts re: workflows permissions

- [x] add permissions to stale workflow - [x] add permissions to tests workflow - [x] remove empty brackers on pull_request branch in tests workflow Signed-off-by: jmeridth <[email protected]>
github · Sep 2, 2024 · 76bfcab · 76bfcab
1 parent 8dd3554
commit 76bfcab
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
@@ -3,6 +3,10 @@ on:
   workflow_dispatch:
   schedule:
     - cron: "0 12 * * *"
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
 jobs:
   stale:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -2,8 +2,10 @@ name: GitHub Actions CI
 on:
   push:
     branches: master
-  pull_request: []
+  pull_request:
   merge_group:
+permissions:
+  contents: read
 jobs:
   tests:
     runs-on: ubuntu-latest