Don't use default permissions (zizmor)

python-trio · Jan 21, 2025 · 419a781 · 419a781
1 parent 9dcc8b7
commit 419a781
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/check-newsfragment.yml b/.github/workflows/check-newsfragment.yml
@@ -1,5 +1,7 @@
 name: Check newsfragment
 
+permissions: {}
+
 on:
   pull_request:
     types: [labeled, unlabeled, opened, synchronize]

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -1,5 +1,7 @@
 name: CI
 
+permissions: {}
+
 on:
   push:
     branches-ignore:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -3,6 +3,8 @@ on:
     tags:
       - v*
 
+permissions: {}
+
 # a lot of code taken from https://github.com/pypa/cibuildwheel/blob/main/examples/github-deploy.yml
 jobs:
   build:
-Original file line number
+Diff line change
@@ Expand Up / @@ -3,6 +3,8 @@ on: @@
         tags:
           - v*
+    permissions: {}
     # a lot of code taken from https://github.com/pypa/cibuildwheel/blob/main/examples/github-deploy.yml
     jobs:
       build:
@@ Expand Down @@