Skip to content

Commit

Permalink
CI: Set workflow permissions
Browse files Browse the repository at this point in the history
Adviced by the GH CodeQL scanner

(cherry picked from commit ce3b4ad)

# Conflicts:
#	.github/workflows/brakeman-analysis.yml
#	.github/workflows/build_test.yml
#	.github/workflows/lint.yml
  • Loading branch information
tvdeyen committed Jan 7, 2025
1 parent 0001aa3 commit 317738b
Show file tree
Hide file tree
Showing 4 changed files with 21 additions and 1 deletion.
3 changes: 3 additions & 0 deletions .github/workflows/backport.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,9 @@ on:
- closed
- labeled

permissions:
pull-requests: write

jobs:
backport:
name: Backport
Expand Down
7 changes: 7 additions & 0 deletions .github/workflows/brakeman-analysis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,13 @@

name: Brakeman Scan

concurrency:
group: brakeman-${{ github.ref_name }}
cancel-in-progress: ${{ github.ref_name != 'main' }}

permissions:
contents: read

on:
push:
branches: [main]
Expand Down
7 changes: 7 additions & 0 deletions .github/workflows/lint.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,13 @@ name: Lint

on: [pull_request]

concurrency:
group: lint-${{ github.ref_name }}
cancel-in-progress: ${{ github.ref_name != 'main' }}

permissions:
contents: read

jobs:
Standard:
runs-on: ubuntu-22.04
Expand Down
5 changes: 4 additions & 1 deletion .github/workflows/stale.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,10 +4,13 @@ on:
schedule:
- cron: "0 0 * * *"

permissions:
pull-requests: write
issues: write

jobs:
stale:
runs-on: ubuntu-22.04

steps:
- uses: actions/stale@v5
with:
Expand Down

0 comments on commit 317738b

Please sign in to comment.