ci(github): Define explicit permission

Signed-off-by: Vincent Boutour <bob@vibioh.fr>
ViBiOh · Jul 2, 2023 · ac3f7de · ac3f7de
1 parent af88643
commit ac3f7de
Show file tree

Hide file tree

Showing 3 changed files with 33 additions and 3 deletions.
diff --git a/.github/workflows/branch_clean.yaml b/.github/workflows/branch_clean.yaml
@@ -1,7 +1,17 @@
 ---
 name: Git
 
-permissions: {}
+permissions:
+  actions: none
+  checks: none
+  contents: read
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
 
 on:
   - pull_request

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -1,7 +1,17 @@
 ---
 name: Build
 
-permissions: {}
+permissions:
+  actions: none
+  checks: none
+  contents: read
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
 
 on:
   push:

diff --git a/.github/workflows/herodote.yaml b/.github/workflows/herodote.yaml
@@ -1,7 +1,17 @@
 ---
 name: Herodote
 
-permissions: {}
+permissions:
+  actions: none
+  checks: none
+  contents: read
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
 
 on:
   push: