Skip to content

Commit 6470d27

Browse files
committed
build: explicitly set permissions for workflows
1 parent 1eff72c commit 6470d27

File tree

4 files changed

+20
-0
lines changed

4 files changed

+20
-0
lines changed

.github/workflows/update_contributors.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,11 @@ on:
2828
# Allow the workflow to be manually run:
2929
workflow_dispatch:
3030

31+
# Global permissions:
32+
permissions:
33+
# Allow read-only access to the repository contents:
34+
contents: read
35+
3136
# Workflow jobs:
3237
jobs:
3338

.github/workflows/update_error_databases.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,11 @@ on:
2828
# Allow the workflow to be manually run:
2929
workflow_dispatch:
3030

31+
# Global permissions:
32+
permissions:
33+
# Allow read-only access to the repository contents:
34+
contents: read
35+
3136
# Workflow jobs:
3237
jobs:
3338

.github/workflows/update_package_meta_data.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,11 @@ on:
2929
# Run the workflow every week on Sunday at 00:00 UTC:
3030
- cron: '0 0 * * 0'
3131

32+
# Global permissions:
33+
permissions:
34+
# Allow read-only access to the repository contents:
35+
contents: read
36+
3237
# Workflow jobs:
3338
jobs:
3439

.github/workflows/update_repl_docs.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,11 @@ on:
3737
# Allow the workflow to be manually run:
3838
workflow_dispatch:
3939

40+
# Global permissions:
41+
permissions:
42+
# Allow read-only access to the repository contents:
43+
contents: read
44+
4045
# Workflow jobs:
4146
jobs:
4247

0 commit comments

Comments
 (0)