From 1d8b6ea0990d688105843a9a67b1d07222350502 Mon Sep 17 00:00:00 2001 From: Joyce Date: Thu, 11 Jan 2024 16:41:20 -0300 Subject: [PATCH] ci: set token permissions to github workflows (#143) * The top level permission for github workflows were set to be content read Signed-off-by: Joyce Brum --- .github/workflows/apidiff.yaml | 2 ++ .github/workflows/tests.yaml | 2 ++ 2 files changed, 4 insertions(+) diff --git a/.github/workflows/apidiff.yaml b/.github/workflows/apidiff.yaml index ca2e787..37c0b5f 100644 --- a/.github/workflows/apidiff.yaml +++ b/.github/workflows/apidiff.yaml @@ -4,6 +4,8 @@ on: pull_request: branches: - master +permissions: + contents: read jobs: compat: runs-on: ubuntu-latest diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml index 39d1811..138397c 100644 --- a/.github/workflows/tests.yaml +++ b/.github/workflows/tests.yaml @@ -4,6 +4,8 @@ on: pull_request: branches: - master +permissions: + contents: read jobs: unit-tests: strategy: