ci: add minimum GitHub token permissions for workflows (openemr#5801)

Signed-off-by: Ashish Kurmi <[email protected]>
bradymiller · Dec 6, 2022 · 8176e29 · 8176e29
1 parent 04dbf43
commit 8176e29
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/manual-build-php-fpm-dockers.yml b/.github/workflows/manual-build-php-fpm-dockers.yml
@@ -3,6 +3,9 @@ name: Manual Build php-fpm Dockers
 on:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
 
   build_7_3:

diff --git a/.github/workflows/styling.yml b/.github/workflows/styling.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ master ]
 
+permissions:
+  contents: read
+
 jobs:
 
   php_styling:

diff --git a/.github/workflows/syntax.yml b/.github/workflows/syntax.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ master ]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-20.04

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ master ]
 
+permissions:
+  contents: read
+
 jobs:
 
   build_apache_74_106: