ci: add minimum GitHub token permissions for workflows (#19138)
Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io> Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io>
This commit is contained in:
		
							
								
								
									
										3
									
								
								.github/workflows/build-image.yml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										3
									
								
								.github/workflows/build-image.yml
									
									
									
									
										vendored
									
									
								
							@@ -10,6 +10,9 @@ on:
 | 
			
		||||
    paths:
 | 
			
		||||
      - .github/workflows/build-image.yml
 | 
			
		||||
      - Dockerfile
 | 
			
		||||
permissions:
 | 
			
		||||
  contents: read
 | 
			
		||||
 | 
			
		||||
jobs:
 | 
			
		||||
  build-image:
 | 
			
		||||
    runs-on: ubuntu-latest
 | 
			
		||||
 
 | 
			
		||||
							
								
								
									
										3
									
								
								.github/workflows/check-i18n.yml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										3
									
								
								.github/workflows/check-i18n.yml
									
									
									
									
										vendored
									
									
								
							@@ -9,6 +9,9 @@ on:
 | 
			
		||||
env:
 | 
			
		||||
  RAILS_ENV: test
 | 
			
		||||
 | 
			
		||||
permissions:
 | 
			
		||||
  contents: read
 | 
			
		||||
 | 
			
		||||
jobs:
 | 
			
		||||
  check-i18n:
 | 
			
		||||
    runs-on: ubuntu-latest
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user