ci: add minimum GitHub token permissions for workflows

Signed-off-by: Ashish Kurmi <[email protected]>
KratosMultiphysics · Sep 9, 2022 · d7f7a74 · d7f7a74
1 parent 2778796
commit d7f7a74
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/build_docker_image_wheelbuilder_linux.yml b/.github/workflows/build_docker_image_wheelbuilder_linux.yml
@@ -9,6 +9,9 @@ on:
       - 'scripts/docker_files/docker_file_wheelbuilder_linux/*'
       - '.github/workflows/build_docker_image_wheelbuilder_linux.yml'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/build_docker_image_wheelbuilder_windows.yml b/.github/workflows/build_docker_image_wheelbuilder_windows.yml
@@ -9,6 +9,9 @@ on:
       - 'scripts/docker_files/docker_file_wheelbuilder_windows/*'
       - '.github/workflows/build_docker_image_wheelbuilder_windows.yml'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: windows-latest

diff --git a/.github/workflows/build_docker_images_with_kratos.yml b/.github/workflows/build_docker_images_with_kratos.yml
@@ -11,6 +11,9 @@ on:
   schedule:
     - cron: '0 0 * * *' # update it every night
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/ci-dummy.yml b/.github/workflows/ci-dummy.yml
@@ -12,6 +12,9 @@ on:
       - 'documents/**'
       - 'scripts/**'
 
+permissions:
+  contents: read
+
 jobs:
   ubuntu:
     runs-on: ubuntu-latest