Restricted GITHUB_TOKEN_PERMISSION (#23)

* restricted GITHUB_TOKEN_PERMISSION * cargo fmt fix * test permission * job permissions
drasi-project · Sep 10, 2024 · 0eb41b6 · 0eb41b6
1 parent 55bf512
commit 0eb41b6
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 0 deletions.
diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
@@ -9,6 +9,10 @@ on:
 env:
   CARGO_TERM_COLOR: always
 
+permissions: 
+  contents: read
+
+
 jobs:
   coverage_with_code_cov: 
     runs-on: ubuntu-latest

diff --git a/.github/workflows/devskim.yml b/.github/workflows/devskim.yml
@@ -8,6 +8,9 @@ on:
   schedule:
     - cron: '30 0 * * 0' #runs every Sunday at 00:30 UTC
 
+permissions: 
+  contents: read
+
 jobs:
   lint:
     name: DevSkim

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -9,9 +9,18 @@ on:
 env:
   CARGO_TERM_COLOR: always
 
+permissions:
+  contents: read
+
+
 jobs:
   test:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      issues: read
+      checks: write
+      pull-requests: write
     services:
       redis:
         image: redis:7-alpine