Merge pull request #878 from turrisxyz/Pinned-Dependencies-GitHub

chore: Set permissions for GitHub actions
thephpleague · Jun 4, 2022 · 5750ff2 · 5750ff2
2 parents 6eddb90 + 9c69d63
commit 5750ff2
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/backwards-compatibility.yml b/.github/workflows/backwards-compatibility.yml
@@ -3,6 +3,9 @@ name: "Backwards compatibility"
 on:
     pull_request:
 
+permissions:
+  contents: read
+
 jobs:
     bc-check:
         name: "Backwards compatibility check"

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -4,6 +4,9 @@ on:
     push: ~
     pull_request: ~
 
+permissions:
+  contents: read
+
 jobs:
     phpcs:
         name: PHPCS
@@ -103,6 +106,9 @@ jobs:
             - run: vendor/bin/psalm --no-progress --stats --threads=$(nproc) --output-format=github --shepherd
 
     docs-lint:
+        permissions:
+          contents: read  # for actions/checkout to fetch code
+          statuses: write  # for github/super-linter/slim to mark status of each linter run
         name: Markdownlint
         runs-on: ubuntu-latest