[github workflow] Resolve token-permissions security alerts (flutter#…

…5627)
mauricioluz · Jan 26, 2023 · d561308 · d561308
1 parent 76f38f8
commit d561308
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
@@ -7,6 +7,9 @@ on:
   push:
     branches:
       - 'main'
+
+# Declare default permissions as read only.
+permissions: read-all
 
 jobs:
   mirror_job:

diff --git a/.github/workflows/pull_request_label.yml b/.github/workflows/pull_request_label.yml
@@ -12,6 +12,9 @@ on:
   pull_request_target:
     types: [opened, synchronize, reopened, closed]
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   label:
     permissions:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -4,6 +4,9 @@ on:
     branches:
       - main
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   release:
     if: github.repository_owner == 'flutter'