Fix workflows permissions

rsksmart · Oct 17, 2024 · 8a9a404 · 8a9a404
1 parent e4011c5
commit 8a9a404
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 2 deletions.
diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
@@ -10,6 +10,9 @@ on:
     branches:
       - "**"
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -8,13 +8,14 @@ on:
   schedule:
     - cron: "0 0 * * *"
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze
     runs-on: ubuntu-latest
     permissions:
-      actions: read
-      contents: read
       security-events: write
 
     strategy:

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -7,6 +7,9 @@ on:
     tags:
       - '*'
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   docker:
     runs-on: ubuntu-20.04

diff --git a/.github/workflows/rit.yml b/.github/workflows/rit.yml
@@ -17,6 +17,9 @@ on:
         required: false
         default: 'master'
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   rootstock-integration-tests:
     name: Rootstock Integration Tests
-Original file line number
+Diff line change
@@ Expand Up / @@ -7,6 +7,9 @@ on: @@
         tags:
           - '*'
+    # Declare default permissions as read only.
+    permissions: read-all
     jobs:
       docker:
         runs-on: ubuntu-20.04
@@ Expand Down @@