Skip to content

Commit 7d8db29

Browse files
authored
ci: scope down GitHub Token permissions (#524)
* ci: scope down permissions for notification.yml * ci: scope down permissions for sonarcloud.yml * ci: scope down permissions for doxygen.yml
1 parent 37b1815 commit 7d8db29

3 files changed

Lines changed: 9 additions & 0 deletions

File tree

.github/workflows/doxygen.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,9 @@ on:
77
branches: ['main']
88
types: [opened, closed]
99

10+
permissions:
11+
contents: write
12+
1013
jobs:
1114
update-doxygen:
1215
runs-on: ubuntu-latest

.github/workflows/notification.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,9 @@ env:
99
ISSUE_TITLE: ${{ github.event.issue.title }}
1010

1111

12+
permissions:
13+
contents: read
14+
1215
jobs:
1316
issue-notification:
1417
runs-on: ubuntu-latest

.github/workflows/sonarcloud.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,9 @@ on:
77
branches:
88
- '*'
99

10+
permissions:
11+
contents: read
12+
1013
jobs:
1114
sonarcloud:
1215
runs-on: ubuntu-latest

0 commit comments

Comments
 (0)