Limit workflow permissions to read-only

xebialabs · Jul 15, 2023 · 89a1733 · 89a1733
1 parent c0a5d43
commit 89a1733
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/ant-javatest.yml b/.github/workflows/ant-javatest.yml
@@ -8,6 +8,8 @@ on:
   pull_request:
     branches: [ master ]
 
+permissions:
+  contents: read
 
 jobs:
 

diff --git a/.github/workflows/ant-regrtest.yml b/.github/workflows/ant-regrtest.yml
@@ -8,6 +8,8 @@ on:
   pull_request:
     branches: [ master ]
 
+permissions:
+  contents: read
 
 jobs:
 

diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
@@ -5,6 +5,9 @@ name: codespell
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   codespell-text:
 

diff --git a/.github/workflows/launcher-test.yml b/.github/workflows/launcher-test.yml
@@ -12,6 +12,8 @@ on:
   pull_request:
     branches: [ master ]
 
+permissions:
+  contents: read
 
 jobs: