Merge pull request #2066 from sashashura/patch-1

GitHub Workflows security hardening
chaoss · Dec 24, 2022 · 3ac6794 · 3ac6794
2 parents 7839435 + b56ef7c
commit 3ac6794
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/build_docker.yml b/.github/workflows/build_docker.yml
@@ -10,8 +10,14 @@ on:
     types:
       - published
 
+permissions: {}
+
 jobs:
   build:
+    permissions:
+      contents: read #  to fetch code (actions/checkout)
+      packages: write #  to push docker image
+
     name: Build image
     runs-on: ubuntu-latest
     steps: