Merge pull request #3 from seemueller-io/1-fix-code-scanning-alert-workflow-does-not-contain-permissions

Set read permissions for workflows in tests and publish
2025-01-09 18:14:57 -05:00
parent 7db4ec2180 36dc86ff8c
commit b4358c641d
2 changed files with 6 additions and 0 deletions
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -6,6 +6,9 @@ on:

 jobs:
  publish:
+    permissions:
+      contents: read
+      pull-requests: read
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -9,6 +9,9 @@ on:

 jobs:
  tests:
+    permissions:
+      contents: read
+      pull-requests: read
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4