Merge pull request #13 from austenstone/austenstone-patch-1

Update ci.yml

Author: austenstone

.github/workflows/ci.yml

@@ -8,6 +8,8 @@ on:
     branches: [ main ]
     paths-ignore:
       - "**.md"
+permissions:
+  contents: read
 
 jobs:
   ci:

.github/workflows/codeql.yml

@@ -10,14 +10,15 @@
 # supported CodeQL languages.
 #
 name: "CodeQL"
-
 on:
   push:
     branches: [ "main" ]
   pull_request:
     branches: [ "main" ]
   schedule:
     - cron: '33 12 * * 2'
+permissions:
+  contents: read
 
 jobs:
   analyze:

.github/workflows/email.yml

@@ -3,6 +3,8 @@ on:
   workflow_dispatch:
   schedule:
     - cron: '0 0 * * *'
+permissions:
+  contents: read
 
 jobs:
   run:
@@ -14,7 +16,7 @@ jobs:
         with:
           organization: ${{ secrets.ORG }}
           github-token: ${{ secrets.TOKEN }}
-      - uses: austenstone/job-summary-to-pdf@main
+      - uses: austenstone/job-summary-to-pdf@v1.0
         id: pdf
         with:
           name: copilot-usage

.github/workflows/usage.yml

@@ -3,6 +3,8 @@ on:
   push:
   pull_request:
   workflow_dispatch:
+permissions:
+  contents: read
 
 jobs:
   run:

README.md

@@ -36,14 +36,14 @@ jobs:
     name: Run Action
     runs-on: ubuntu-latest
     steps:
-      - uses: austenstone/copilot-usage@main
+      - uses: austenstone/copilot-usage@v3
         with:
           github-token: ${{ secrets.TOKEN }}
 ```
 ## Example get team usage
 
 ```yml
-      - uses: austenstone/copilot-usage@main
+      - uses: austenstone/copilot-usage@v3
         with:
           github-token: ${{ secrets.TOKEN }}
           organization: 'org-slug'
@@ -53,7 +53,7 @@ jobs:
 ## Example get enterprise usage
 
 ```yml
-      - uses: austenstone/copilot-usage@main
+      - uses: austenstone/copilot-usage@v3
         with:
           github-token: ${{ secrets.TOKEN }}
           enterprise: 'enterprise-slug'
@@ -75,10 +75,10 @@ jobs:
   run:
     runs-on: ubuntu-latest
     steps:
-      - uses: austenstone/copilot-usage@main
+      - uses: austenstone/copilot-usage@v3
         with:
           github-token: ${{ secrets.TOKEN }}
-      - uses: austenstone/job-summary-to-pdf@main
+      - uses: austenstone/job-summary-to-pdf@v1.0
         id: pdf
         with:
           name: copilot-usage