Skip to content

Commit

Permalink
chore(ci): Set permissions for GitHub actions
Browse files Browse the repository at this point in the history
 Restrict the GitHub token permissions only to the required ones; this way,
 even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
  • Loading branch information
naveensrinivasan committed Jun 24, 2022
1 parent 5e71cf5 commit 172f7ae
Show file tree
Hide file tree
Showing 3 changed files with 11 additions and 0 deletions.
3 changes: 3 additions & 0 deletions .github/workflows/lint.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,9 @@ on:
branches:
- master

permissions:
contents: read

jobs:
linux:
name: Linux - Lint
Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,13 @@ on:
branches:
- master

permissions:
contents: read

jobs:
main:
permissions:
contents: none
name: Test, Tag Commit and Release to NPM
runs-on: ubuntu-latest
env:
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,9 @@ on:
branches:
- master

permissions:
contents: read

jobs:
main:
name: Unit (Client and Server), E2E and Integration Test
Expand Down

0 comments on commit 172f7ae

Please sign in to comment.