ci(permissions): provided only the necessary permissions to the GITHUB_TOKEN

This commit is contained in:
Alex 2023-01-14 15:11:42 +01:00 committed by GitHub
parent e607e234f3
commit be2e1965ae
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 9 additions and 0 deletions

View File

@ -6,8 +6,14 @@ name: Release
- next - next
- beta - beta
- "*.x" - "*.x"
permissions:
contents: read # for checkout
jobs: jobs:
release: release:
permissions:
contents: write # to be able to publish a GitHub release
issues: write # to be able to comment on released issues
pull-requests: write # to be able to comment on released pull requests
name: release name: release
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:

View File

@ -12,6 +12,9 @@ on:
- opened - opened
- synchronize - synchronize
permissions:
contents: read # to fetch code (actions/checkout)
jobs: jobs:
test_matrix: test_matrix:
strategy: strategy: