Skip to content

Commit 91ff851

Browse files
tacaswelltacaswell
committed
CI: Restrict default permissions
Reduces risk of arbitrary code is run by attacker.
1 parent 07d3dbf commit 91ff851

File tree

5 files changed

+10
-0
lines changed

5 files changed

+10
-0
lines changed

‎.github/workflows/black.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: Check Code Style - BLACK
2+
permissions:
3+
contents: read
24

35
on: [push, pull_request]
46

‎.github/workflows/docs.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: Docs
2+
permissions:
3+
contents: read
24

35
on: [push, pull_request]
46

‎.github/workflows/release.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
---
22

33
name: Release
4+
permissions:
5+
contents: read
46
on:
57
release:
68
types:

‎.github/workflows/ruff.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: Check Code Style - ruff
2+
permissions:
3+
contents: read
24

35
on: [push, pull_request]
46

‎.github/workflows/testing.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: Unit Tests
2+
permissions:
3+
contents: read
24

35
on: [push, pull_request]
46

0 commit comments

Comments
 (0)