Merge pull request #675 from openziti/codeql-workflow-permissions

ekoby · web-flow · commit 93742f9ed244 · 2025-03-05T11:38:12.000-05:00
add permissions block to workflows
diff --git a/.github/workflows/draft-release.yml b/.github/workflows/draft-release.yml
@@ -1,4 +1,6 @@
 name: Release Drafter
+permissions:
+  contents: read
 
 on:
   push:
diff --git a/.github/workflows/gradle-build.yml b/.github/workflows/gradle-build.yml
@@ -1,5 +1,6 @@
 name: CI build
-
+permissions:
+  contents: read
 on:
   workflow_dispatch:
 
diff --git a/.github/workflows/mattermost-ziti-webhook.yml b/.github/workflows/mattermost-ziti-webhook.yml
@@ -1,4 +1,6 @@
 name: ziti-mattermost-action-py
+permissions: {}
+
 on:
   issues:
   issue_comment:
diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
@@ -1,5 +1,6 @@
 name: Publish Release
-
+permissions:
+  contents: read
 on:
   push:
     branches:
