Skip to content

Commit 701ce06

Browse files
authored
Add missing security permissions to workflows (recreated PR) (#971)
* Add missing security permissions to codeql.yml * Add permissions to build-on-windows.yml * Add permissions to linters.yml * Add permissions to build-test-deploy.yml * Change CodeQL to run on any branch, not just master * Undo trigger changes * Change CodeQL to run on any PR * Add push rule
1 parent 8e2338a commit 701ce06

File tree

4 files changed

+16
-6
lines changed

4 files changed

+16
-6
lines changed

.github/workflows/build-on-windows.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,8 @@
11
name: Build gProfiler on Windows
22

3+
permissions:
4+
contents: read
5+
36
on: pull_request
47

58
jobs:

.github/workflows/build-test-deploy.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,9 @@
77

88
name: Build, test and deploy
99

10+
permissions:
11+
contents: read
12+
1013
on:
1114
pull_request:
1215
push:

.github/workflows/codeql.yml

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -11,13 +11,14 @@
1111
#
1212
name: "CodeQL Advanced"
1313

14-
on:
15-
push:
16-
branches: [ "master" ]
14+
permissions:
15+
security-events: write
16+
17+
on:
1718
pull_request:
18-
branches: [ "master" ]
19-
schedule:
20-
- cron: '05 19 * * 2'
19+
push:
20+
tags:
21+
- '**'
2122

2223
jobs:
2324
analyze:

.github/workflows/linters.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,8 @@
11
name: Linters
22

3+
permissions:
4+
contents: read
5+
36
on: pull_request
47

58
jobs:

0 commit comments

Comments
 (0)