geoffsee/manifold-workflow-engine
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #3 from seemueller-io/1-fix-code-scanning-alert-workflow-does-not-contain-permissions

Browse Source 
Set read permissions for workflows in tests and publish
This commit is contained in:
Geoff Seemueller
2025-01-09 18:14:57 -05:00
committed by GitHub
parent 7db4ec2180 36dc86ff8c
commit b4358c641d
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/publish.yml vendored
View File

@@ -6,6 +6,9 @@ on:
jobs: jobs:
publish: publish:
permissions:
contents: read
pull-requests: read
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4

3
.github/workflows/tests.yml vendored
View File

@@ -9,6 +9,9 @@ on:
jobs: jobs:
tests: tests:
permissions:
contents: read
pull-requests: read
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4