update

wtetsu · Jan 18, 2025 · 2076ec5 · 2076ec5
1 parent 9cc2812
commit 2076ec5
Show file tree

Hide file tree

Showing 5 changed files with 19 additions and 6 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -1,5 +1,9 @@
 name: Build
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on: [push, pull_request]
 
 jobs:

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -11,14 +11,11 @@ jobs:
     name: Analyze (${{ matrix.language }})
     runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
     permissions:
-      # required for all workflows
-      security-events: write
+\      security-events: write
 
-      # required to fetch internal or private CodeQL packs
-      packages: read
+\      packages: read
 
-      # only required for workflows in private repositories
-      actions: read
+\      actions: read
       contents: read
 
     strategy:

diff --git a/.github/workflows/license.yml b/.github/workflows/license.yml
@@ -1,5 +1,9 @@
 name: License
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   push:
     tags:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -1,5 +1,9 @@
 name: Release
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   push:
     tags:

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -1,5 +1,9 @@
 name: Test
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on: [push, pull_request]
 
 jobs: