Merge pull request #16699 from pshipton/actionperms

Restrict presubmit.yml permissions, delete assign-to-project.yml
eclipse-openj9 · Feb 14, 2023 · 5a52b0d · 5a52b0d
2 parents 9160108 + c11e2e9
commit 5a52b0d
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 56 deletions.
diff --git a/.github/workflows/assign-to-project.yml b/.github/workflows/assign-to-project.yml
diff --git a/.github/workflows/presubmit.yml b/.github/workflows/presubmit.yml
@@ -1,5 +1,5 @@
 ###############################################################################
-# Copyright (c) 2021, 2021 IBM Corp. and others
+# Copyright (c) 2021, 2023 IBM Corp. and others
 #
 # This program and the accompanying materials are made available under
 # the terms of the Eclipse Public License 2.0 which accompanies this
@@ -34,6 +34,9 @@ on: workflow_dispatch
 #       - 'doc/**'
 #       - '.github/ISSUE_TEMPLATE/**'
 #       - '.github/*.yml'
+permissions:  # added using https://github.com/step-security/secure-repo
+  contents: read
+
 jobs:
   Linter:
     runs-on: ubuntu-16.04