Skip to content

Commit feb59e2

Browse files
authored
Grant granular permissions to workflows for better security measures (#189)
1 parent 8557d5f commit feb59e2

File tree

2 files changed

+9
-1
lines changed

2 files changed

+9
-1
lines changed

.github/workflows/ci.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
name: CI
22

3+
permissions:
4+
contents: read
5+
actions: write
6+
37
on:
48
push:
59
branches:

.github/workflows/notification.yml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,17 @@ name: GitHub Issue notifications
22

33
on: [issue_comment,issues]
44

5+
6+
permissions:
7+
contents: read
8+
issues: read
9+
510
env:
611
ACTION_NAME: ${{ github.event.action }}
712
EVENT_NAME: ${{ github.event_name }}
813
ISSUE_NUMBER: ${{ github.event.issue.number }}
914
ISSUE_TITLE: ${{ github.event.issue.title }}
1015

11-
1216
jobs:
1317
issue-notification:
1418
runs-on: ubuntu-latest

0 commit comments

Comments
 (0)