Skip to content

Commit 845f5b2

Browse files
authored
chore: Add permissions to all workflows (#321)
1 parent d32027f commit 845f5b2

File tree

5 files changed

+14
-1
lines changed

5 files changed

+14
-1
lines changed

.github/workflows/lint.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,9 @@ on:
66
branches:
77
- main
88

9+
permissions:
10+
contents: read
11+
912
jobs:
1013
lint:
1114
runs-on: ubuntu-latest

.github/workflows/pr_title.yml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,9 @@ on:
77
- edited
88
- synchronize
99

10+
permissions:
11+
pull-requests: read
12+
1013
jobs:
1114
main:
1215
name: Validate PR title
@@ -44,7 +47,7 @@ jobs:
4447
# special "[WIP]" prefix to indicate this state. This will avoid the
4548
# validation of the PR title and the pull request checks remain pending.
4649
# Note that a second check will be reported if this is enabled.
47-
wip: true
50+
wip: false
4851
# When using "Squash and merge" on a PR with only one commit, GitHub
4952
# will suggest using that commit message instead of the PR title for the
5053
# merge commit, and it's easy to commit this by mistake. Enable this option

.github/workflows/publish.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,9 @@ on:
44
tags:
55
- "v*.*.*"
66

7+
permissions:
8+
contents: read
9+
710
jobs:
811
pypi-publish:
912
name: upload release to PyPI

.github/workflows/release_pr.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@ on:
33
push:
44
branches:
55
- main
6+
permissions:
7+
contents: read
68

79
jobs:
810
release-please:

.github/workflows/unittests.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,8 @@ on:
55
push:
66
branches:
77
- main
8+
permissions:
9+
contents: read
810

911
jobs:
1012
test:

0 commit comments

Comments
 (0)