ci(permissions): provided only the necessary permissions to the GITHUB_TOKEN
This commit is contained in:
parent
e607e234f3
commit
be2e1965ae
6
.github/workflows/release.yml
vendored
6
.github/workflows/release.yml
vendored
@ -6,8 +6,14 @@ name: Release
|
|||||||
- next
|
- next
|
||||||
- beta
|
- beta
|
||||||
- "*.x"
|
- "*.x"
|
||||||
|
permissions:
|
||||||
|
contents: read # for checkout
|
||||||
jobs:
|
jobs:
|
||||||
release:
|
release:
|
||||||
|
permissions:
|
||||||
|
contents: write # to be able to publish a GitHub release
|
||||||
|
issues: write # to be able to comment on released issues
|
||||||
|
pull-requests: write # to be able to comment on released pull requests
|
||||||
name: release
|
name: release
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
|
3
.github/workflows/test.yml
vendored
3
.github/workflows/test.yml
vendored
@ -12,6 +12,9 @@ on:
|
|||||||
- opened
|
- opened
|
||||||
- synchronize
|
- synchronize
|
||||||
|
|
||||||
|
permissions:
|
||||||
|
contents: read # to fetch code (actions/checkout)
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
test_matrix:
|
test_matrix:
|
||||||
strategy:
|
strategy:
|
||||||
|
Loading…
x
Reference in New Issue
Block a user