Update permissions for workflows that call scorecard

Signed-off-by: Spencer Wilson <[email protected]>
open-quantum-safe · Sep 4, 2024 · b3f8742 · b3f8742
1 parent d06d640
commit b3f8742
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/.github/workflows/commit-to-main.yml b/.github/workflows/commit-to-main.yml
@@ -1,7 +1,7 @@
 name: Main branch tests
 
-permissions:
-  contents: read
+# read-all permissions are required for the scorecard job
+permissions: read-all
 
 on:
   push:

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -1,7 +1,7 @@
 name: Pull request tests
 
-permissions:
-  contents: read
+# read-all permissions are required for the scorecard job
+permissions: read-all
 
 on: pull_request
 

diff --git a/.github/workflows/weekly.yml b/.github/workflows/weekly.yml
@@ -1,7 +1,7 @@
 name: Weekly tests
 
-permissions:
-  contents: read
+# read-all permissions are required for the scorecard job
+permissions: read-all
 
 on:
   schedule: