Setup permissions for GH workflows (#1492)

handsontable · Feb 4, 2025 · fc0c1b5 · fc0c1b5
1 parent 14ae706
commit fc0c1b5
Show file tree

Hide file tree

Showing 8 changed files with 19 additions and 0 deletions.
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
@@ -1,4 +1,6 @@
 name: Security
+permissions:
+  contents: read
 
 on:
   pull_request:

diff --git a/.github/workflows/build-docs.yml b/.github/workflows/build-docs.yml
@@ -1,4 +1,6 @@
 name: Build docs
+permissions:
+  contents: read
 
 on:
   pull_request:

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -1,4 +1,6 @@
 name: Build on various envs
+permissions:
+  contents: read
 
 on:
   pull_request:

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -1,4 +1,7 @@
 name: "CodeQL"
+permissions:
+  contents: read
+  pull-requests: write
 
 on:
   pull_request:

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -1,4 +1,6 @@
 name: Lint
+permissions:
+  contents: read
 
 on:
   pull_request:

diff --git a/.github/workflows/performance.yml b/.github/workflows/performance.yml
@@ -1,4 +1,7 @@
 name: Performance
+permissions:
+  contents: read
+  pull-requests: write
 
 on:
   pull_request:

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -1,4 +1,7 @@
 name: Publish
+permissions:
+  contents: read
+  pages: write
 
 on:
   push:

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -1,4 +1,6 @@
 name: Test
+permissions:
+  contents: read
 
 on:
   pull_request: