build(devs-infra): set permissions for GH actions(#3804)

kulshekhar · Sep 11, 2022 · 76c9095 · 76c9095
1 parent e79be47
commit 76c9095
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/prepare-cache.yml b/.github/workflows/prepare-cache.yml
@@ -7,6 +7,9 @@ on:
         required: true
         type: string
 
+permissions: # added using https://github.com/step-security/secure-workflows
+  contents: read
+
 jobs:
   prepare-npm-cache:
     name: Prepare npm cache for ${{ inputs.os }}

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -7,8 +7,14 @@ on:
         required: true
         type: string
 
+permissions: # added using https://github.com/step-security/secure-workflows
+  contents: read
+
 jobs:
   test:
+    permissions:
+      checks: write # for coverallsapp/github-action to create new checks
+      contents: read # for actions/checkout to fetch code
     strategy:
       fail-fast: false
       matrix: