Merge pull request fluent#4581 from kenhys/fix-ci-permission

github: set job permissions
Watson1978 · Aug 7, 2024 · 5b9b1f2 · 5b9b1f2
2 parents 5e75248 + 3341478
commit 5b9b1f2
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/stale-actions.yml b/.github/workflows/stale-actions.yml
@@ -3,9 +3,14 @@ on:
   schedule:
   - cron: "00 10 * * *"
 
+permissions: read-all
+
 jobs:
   stale:
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
     steps:
     - uses: actions/stale@v8
       with:

diff --git a/.github/workflows/test-ruby-head.yml b/.github/workflows/test-ruby-head.yml
@@ -5,6 +5,8 @@ on:
     - cron: '11 14 * * 0'
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
   test:
     runs-on: ${{ matrix.os }}

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -6,6 +6,8 @@ on:
   pull_request:
     branches: [master]
 
+permissions: read-all
+
 jobs:
   test:
     runs-on: ${{ matrix.os }}