Restrict all GH workflows top-level token permissions

sparky-game · Dec 9, 2024 · 2aa26d7 · 2aa26d7
1 parent da58a11
commit 2aa26d7
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
@@ -11,6 +11,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: false
 
+permissions: read-all
+
 jobs:
   security-analysis:
     permissions:

diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -24,6 +24,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: false
 
+permissions: read-all
+
 jobs:
   test:
     permissions:

diff --git a/.github/workflows/www.yaml b/.github/workflows/www.yaml
@@ -11,6 +11,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: read-all
+
 jobs:
   deploy:
     permissions: