change top level permissions to contents: read for tfsec workflow

3ware · Mar 16, 2023 · 5851e60 · 5851e60
1 parent 90d2060
commit 5851e60
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/.github/workflows/tfsec-pr.yaml b/.github/workflows/tfsec-pr.yaml
@@ -10,18 +10,16 @@ on:
         type: string
 
 # Declare default permissions as read only.
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   find-terraform:
-    permissions:
-      contents: read
     uses: ./.github/workflows/get-terraform-dir.yaml
 
   tfsec-pr-commenter:
     permissions:
       pull-requests: write
-      contents: read
     runs-on: ubuntu-latest
     timeout-minutes: 10
     concurrency: