Skip to content

Commit 60dc0db

Browse files
committed
Fix security issues
1 parent 72ad7b3 commit 60dc0db

2 files changed

Lines changed: 12 additions & 2 deletions

File tree

.github/workflows/on_push.yml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,8 @@
22
jobs:
33
find-projects:
44
runs-on: ubuntu-latest
5+
permissions:
6+
contents: read
57
outputs:
68
projects: ${{ steps.find.outputs.projects }}
79
steps:
@@ -18,6 +20,8 @@ jobs:
1820
build:
1921
needs: find-projects
2022
runs-on: ubuntu-latest
23+
permissions:
24+
contents: read
2125
strategy:
2226
fail-fast: false
2327
matrix:
@@ -33,6 +37,6 @@ jobs:
3337
archive: false
3438
- uses: actions/upload-artifact@v7
3539
name: Upload build
36-
with:
40+
with:
3741
path: ${{ matrix.project.dir }}/bin/Release/**/
3842
name: ${{ matrix.project.name }}

.github/workflows/release.yml

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,8 @@
22
jobs:
33
find-projects:
44
runs-on: ubuntu-latest
5+
permissions:
6+
contents: read
57
outputs:
68
projects: ${{ steps.find.outputs.projects }}
79
steps:
@@ -18,6 +20,8 @@ jobs:
1820
build:
1921
needs: find-projects
2022
runs-on: ubuntu-latest
23+
permissions:
24+
contents: read
2125
strategy:
2226
fail-fast: false
2327
matrix:
@@ -39,6 +43,8 @@ jobs:
3943
get-verion:
4044
needs: build
4145
runs-on: ubuntu-latest
46+
permissions:
47+
contents: read
4248
outputs:
4349
version: ${{ steps.get_version.outputs.version }}
4450
steps:
@@ -55,7 +61,7 @@ jobs:
5561
release:
5662
needs: get-verion
5763
runs-on: ubuntu-latest
58-
permissions:
64+
permissions:
5965
contents: write
6066
steps:
6167
- uses: actions/download-artifact@v8

0 commit comments

Comments
 (0)