security: add permissions block to workflows (#3630)

elastic · Mar 28, 2024 · b28634e · b28634e
1 parent c60b759
commit b28634e
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/add-issue-to-project.yml b/.github/workflows/add-issue-to-project.yml
@@ -3,6 +3,9 @@ on:
   issues:
     types:
       - opened
+permissions:
+  contents: read
+
 jobs:
   add_issue_to_project:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/add-pr-to-project.yml b/.github/workflows/add-pr-to-project.yml
@@ -4,6 +4,9 @@ on:
     types: [review_requested]
     branches:
       - 'main'
+permissions:
+  contents: read
+
 jobs:
   specific_review_requested:
     name: Adding

diff --git a/.github/workflows/add-to-dev-projects.yml b/.github/workflows/add-to-dev-projects.yml
@@ -3,6 +3,9 @@ on:
   pull_request_target:
     types:
       - labeled
+permissions:
+  contents: read
+
 jobs:
   add_to_data_plane-project:
     runs-on: ubuntu-latest