ci: add minimum GitHub token permissions for workflows (#8169)

Signed-off-by: Varun Sharma <[email protected]>
swagger-api · Nov 10, 2023 · 9bdbaef · 9bdbaef
1 parent bb04915
commit 9bdbaef
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/dependabot-merge.yml b/.github/workflows/dependabot-merge.yml
@@ -4,6 +4,9 @@ on:
   pull_request_target:
     branches: [ master, next ]
 
+permissions:
+  contents: read
+
 jobs:
   merge-me:
     name: Merge me!

diff --git a/.github/workflows/docker-image-check.yml b/.github/workflows/docker-image-check.yml
@@ -5,6 +5,9 @@ on:
   schedule:
     - cron:  '30 4 * * *'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
@@ -12,6 +12,9 @@ on:
 env:
   CYPRESS_CACHE_FOLDER: cypress/cache
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest