From 6bfb47ca2411d814d35dfefab03d9bb125465974 Mon Sep 17 00:00:00 2001 From: Mathieu Benoit Date: Thu, 21 Nov 2024 09:52:13 -0500 Subject: [PATCH] Update ci.yml - explicit contents read permission Signed-off-by: Mathieu Benoit --- .github/workflows/ci.yml | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6461a06..df5065d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,27 +1,24 @@ name: CI - on: # We run the CI checks on any pull request updates or pushes to the main branch after PR merge. pull_request: push: branches: - main - +permissions: + contents: read jobs: ci: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - - uses: actions/setup-go@v5 with: go-version-file: 'go.mod' check-latest: true - - run: | go vet ./... go test ./... --cover - - name: Install license check tool run: go install github.com/google/addlicense@latest - name: Check licenses