From c05362aeae684766cbab4becc6aadd33213dca57 Mon Sep 17 00:00:00 2001 From: Arpit Jain Date: Thu, 14 May 2026 03:10:35 +0900 Subject: [PATCH] ci: declare contents: read on ci/e2e-test/integration-test workflows All three workflows do pure CI runs (checkout + Go build/test, or e2e/ integration test execution). cli-validate.yml in this repo already declares workflow-level contents: read; this brings the remaining three in line. Signed-off-by: Arpit Jain --- .github/workflows/ci.yml | 3 +++ .github/workflows/e2e-test.yml | 3 +++ .github/workflows/integration-test.yml | 3 +++ 3 files changed, 9 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4b1752dda..5fd3d9007 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -6,6 +6,9 @@ on: push: branches: [ main ] +permissions: + contents: read + jobs: lint: runs-on: ubuntu-latest diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml index d89920eb2..d2701e932 100644 --- a/.github/workflows/e2e-test.yml +++ b/.github/workflows/e2e-test.yml @@ -10,6 +10,9 @@ on: push: branches: [ main ] +permissions: + contents: read + jobs: e2e-test: strategy: diff --git a/.github/workflows/integration-test.yml b/.github/workflows/integration-test.yml index da70b5881..b9002fc3f 100644 --- a/.github/workflows/integration-test.yml +++ b/.github/workflows/integration-test.yml @@ -6,6 +6,9 @@ on: branches: [ main ] push: +permissions: + contents: read + jobs: integration-test: runs-on: ubuntu-latest