Merge pull request #3985 from facebook/scorecard_permission

Cyan4973 · web-flow · commit 78f732cfdd65 · 2024-03-21T13:56:20.000-07:00
try to silence some scorecard warnings
diff --git a/.github/workflows/commit.yml b/.github/workflows/commit.yml
@@ -3,6 +3,7 @@ on:
   push:
     branches:
     - dev
+permissions: read-all
 jobs:
   short-tests-0:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
@@ -7,6 +7,7 @@ on:
     - release
     - dev
     - master
+permissions: read-all
 jobs:
   regression-test:
     runs-on: ubuntu-latest
