Permissions on GitHub workflows.

Atostek · Feb 13, 2025 · 6bf3f56 · 6bf3f56
1 parent 5f6cca5
commit 6bf3f56
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 9 deletions.
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
@@ -5,16 +5,11 @@ on:
     paths: 
       - '**/Cargo.toml'
       - '**/Cargo.lock'
+      - '.github/workflows/audit.yml'
 
-github-token:
-  action-input:
-    input: token
-    is-default: false
-  permissions:
-    issues: write
-    issues-reason: to create issues
-    checks: write
-    checks-reason: to create check
+permissions:
+  issues: write
+  checks: write
 
 jobs:
   security_audit:

diff --git a/.github/workflows/static-checks.yml b/.github/workflows/static-checks.yml
@@ -5,6 +5,8 @@ on:
 
 name: CI / Static Checks
 
+permissions: read-all
+
 jobs:
 
   fmt:

diff --git a/.github/workflows/tests-macos.yml b/.github/workflows/tests-macos.yml
@@ -5,6 +5,8 @@ on:
 
 name: CI / Tests on macOS
 
+permissions: read-all
+
 jobs:
 
   test-on-macos:

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -5,6 +5,8 @@ on:
 
 name: CI / Tests
 
+permissions: read-all
+
 jobs:
 
   test-on-ubuntu:
-Original file line number
+Diff line change
@@ Expand Up / @@ -5,6 +5,8 @@ on: @@
     name: CI / Static Checks
+    permissions: read-all
     jobs:
       fmt:
@@ Expand Down @@