Minimize permissions to CI workflows

Set only read permission on CI workflows since they don't need write access.
uber-go · Mar 20, 2023 · de86be9 · de86be9
1 parent 384e782
commit de86be9
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/.github/workflows/fossa.yaml b/.github/workflows/fossa.yaml
@@ -1,6 +1,9 @@
 name: FOSSA Analysis
 on: push
 
+permissions:
+  contents: read
+
 jobs:
 
   build:

diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
@@ -7,6 +7,9 @@ on:
   pull_request:
     branches: ['*']
 
+permissions:
+  contents: read
+
 jobs:
 
   build:
@@ -48,4 +51,4 @@ jobs:
 
     - name: vulncheck
       if: matrix.latest
-      run: make vulncheck
+      run: make vulncheck