Fix CI permissions (#26)

Follow the CodeQL guidelines to fix CI.
chrisstaite · Jan 13, 2025 · 9344d51 · 9344d51
1 parent dcd2d53
commit 9344d51
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/.github/workflows/cmake.yml b/.github/workflows/cmake.yml
@@ -1,10 +1,14 @@
 name: CMake
 
+permissions:
+  contents: write
+  pull-requests: write
+
 on:
   push:
     branches: [ main ]
   pull_request:
-    branches: [ mainw ]
+    branches: [ main ]
   release:
     types: [ created ]
 
@@ -36,7 +40,7 @@ jobs:
       run: mv ${{github.workspace}}/build/dote ${{github.workspace}}/build/dote_linux
 
     - name: Upload release binary
-      uses: softprops/action-gh-release@v2
+      uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda #v2
       if: github.event_name == 'release' && github.event.action == 'created'
       with:
         files: ${{github.workspace}}/build/dote_linux
@@ -100,7 +104,7 @@ jobs:
       run: mv ${{github.workspace}}/build/dote ${{github.workspace}}/build/dote_${{matrix.architecture}}
 
     - name: Upload release binary
-      uses: softprops/action-gh-release@v2
+      uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda #v2
       if: github.event_name == 'release' && github.event.action == 'created'
       with:
         files: ${{github.workspace}}/build/dote_${{matrix.architecture}}
@@ -132,7 +136,7 @@ jobs:
       run: mv ${{github.workspace}}/build_mac/dote ${{github.workspace}}/build_mac/dote_mac
 
     - name: Upload release binary
-      uses: softprops/action-gh-release@v2
+      uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda #v2
       if: github.event_name == 'release' && github.event.action == 'created'
       with:
         files: ${{github.workspace}}/build_mac/dote_mac