Merge e12ef1b into 516d5a9

streetsidesoftware · Apr 5, 2022 · fe729b1 · fe729b1
2 parents 516d5a9 + e12ef1b
commit fe729b1
Show file tree

Hide file tree

Showing 5 changed files with 21 additions and 0 deletions.
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -12,8 +12,15 @@ on:
   schedule:
     - cron: "0 23 * * 0"
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
+    permissions:
+      actions: read # for github/codeql-action/init to get workflow details
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/analyze to upload SARIF results
     name: Analyze
     runs-on: ubuntu-latest
 
@@ -28,3 +35,5 @@ jobs:
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v1
+
+# cspell:ignore codeql
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
@@ -5,6 +5,9 @@ on:
     branches:
       - master
 
+permissions:
+  contents: read
+
 jobs:
   coverage:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/integration-test.yml b/.github/workflows/integration-test.yml
@@ -5,6 +5,9 @@ on:
     branches:
       - master
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ${{ matrix.os }}

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -3,6 +3,9 @@ on: # rebuild any PRs and main branch changes
   pull_request:
   push:
 
+permissions:
+  contents: read
+
 jobs:
   cspell:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -6,6 +6,9 @@ on:
       - master
       - cspell4
 
+permissions:
+  contents: read
+
 jobs:
   test-node-lts:
     runs-on: ${{ matrix.os }}