Add permissions blocks to all workflows

This commit is contained in:
Andrew Eisenberg
2025-02-13 22:36:28 +00:00
parent 417dd23e5b
commit 63add52bba
3 changed files with 9 additions and 4 deletions

View File

@@ -14,6 +14,9 @@ on:
schedule: schedule:
- cron: '42 12 * * *' - cron: '42 12 * * *'
permissions:
contents: read
jobs: jobs:
check-submodules: check-submodules:
runs-on: ubuntu-latest runs-on: ubuntu-latest

View File

@@ -6,6 +6,9 @@ on:
push: push:
branches: [ main ] branches: [ main ]
permissions:
contents: write
jobs: jobs:
mirror-main-to-master: mirror-main-to-master:
runs-on: ubuntu-latest runs-on: ubuntu-latest

View File

@@ -24,4 +24,3 @@ jobs:
--repo "$GITHUB_REPOSITORY" \ --repo "$GITHUB_REPOSITORY" \
--title "Submodule pointers out of date: $TODAY" \ --title "Submodule pointers out of date: $TODAY" \
--body "Submodule pointer check failed: $WORKFLOW_RUN_URL" --body "Submodule pointer check failed: $WORKFLOW_RUN_URL"