Add default permissions

devops-actions · Jun 1, 2024 · debd89c · debd89c
1 parent 73f1882
commit debd89c
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/.github/workflows/add-labels.yml b/.github/workflows/add-labels.yml
@@ -2,12 +2,18 @@ name: add-labels
 on: 
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   test_action_job:
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     steps:
       - name: Check out source code
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6      
+
       - name: Synchronize labels
         uses: julb/action-manage-label@6ab8797f08ad692a9c1983de9b7c70fecaa927cf # v1
         with:

diff --git a/.github/workflows/ossf-analysis.yml b/.github/workflows/ossf-analysis.yml
@@ -12,8 +12,8 @@ on:
 
   workflow_dispatch:
 
-# Declare default GITHUB_TOKEN permissions as read only.
-permissions: read-all
+permissions: 
+  contents: read
 
 jobs:
   analysis: