Skip to content

Commit 95849da

Browse files
committed
add permissions to workflow
1 parent 222f7c1 commit 95849da

4 files changed

Lines changed: 19 additions & 3 deletions

File tree

.github/workflows/community-id-requester.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,11 @@ on:
2323
issues:
2424
types: [labeled]
2525

26+
permissions:
27+
contents: read
28+
issues: write
29+
pull-requests: write
30+
2631
jobs:
2732

2833
community-id-requester:

.github/workflows/disallowed-content-checks.yaml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,9 +22,13 @@ on:
2222
pull_request_target:
2323
branches: [main]
2424

25+
permissions:
26+
contents: read
27+
pull-requests: write
28+
2529
jobs:
2630
main:
27-
runs-on: ubuntu-20.04
31+
runs-on: ubuntu-22.04
2832
steps:
2933

3034
- id: token_gen

.github/workflows/markdown-checks.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,10 +19,13 @@ on:
1919
branches: [main]
2020
paths: 'docs/**'
2121

22+
permissions:
23+
contents: read
24+
2225
jobs:
2326
main:
2427
if: contains(github.repositoryUrl, 'github.com')
25-
runs-on: ubuntu-20.04
28+
runs-on: ubuntu-22.04
2629
steps:
2730

2831
- id: checkout_repo

.github/workflows/merged-pr-labeler.yaml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,13 +18,17 @@ on:
1818
pull_request_target:
1919
types: [closed]
2020

21+
permissions:
22+
contents: read
23+
pull-requests: write
24+
2125
jobs:
2226

2327
assign-label-on-merge:
2428
if: contains(github.repositoryUrl, 'github.com') && github.event.pull_request.merged
2529
env:
2630
LABEL: "contribution"
27-
runs-on: ubuntu-20.04
31+
runs-on: ubuntu-22.04
2832

2933
steps:
3034

0 commit comments

Comments
 (0)