GitHub Actions read permissions

Refs simonw/datasette#1740
simonw · May 31, 2022 · ba2bd10 · ba2bd10 · github-actions · May 31, 2022
1 parent 449fb2b
commit ba2bd10
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/{{cookiecutter.hyphenated}}/.github/workflows/publish.yml b/{{cookiecutter.hyphenated}}/.github/workflows/publish.yml
@@ -4,6 +4,9 @@ on:
   release:
     types: [created]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest

diff --git a/{{cookiecutter.hyphenated}}/.github/workflows/test.yml b/{{cookiecutter.hyphenated}}/.github/workflows/test.yml
@@ -1,6 +1,9 @@
 name: Test
 
 on: [push, pull_request]
+
+permissions:
+  contents: read
 {% raw %}
 jobs:
   test: