Harden workflow permissions.

vezel-dev · Jan 22, 2024 · d3cf0a5 · d3cf0a5
1 parent 359d3f6
commit d3cf0a5
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -6,6 +6,8 @@ on:
             - dependabot/**
     pull_request:
     workflow_dispatch:
+permissions:
+    contents: read
 defaults:
     run:
         shell: bash

diff --git a/.github/workflows/package.yml b/.github/workflows/package.yml
@@ -4,6 +4,9 @@ on:
     push:
         branches:
             - master
+permissions:
+    contents: read
+    packages: write
 defaults:
     run:
         shell: bash

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -4,6 +4,8 @@ on:
     release:
         types:
             - published
+permissions:
+    contents: read
 defaults:
     run:
         shell: bash