Fix workflows, permissions at top level

Signed-off-by: David Cassany <[email protected]>
rancher · Jul 9, 2024 · d3da1cf · d3da1cf
1 parent 8b8ae12
commit d3da1cf
Show file tree

Hide file tree

Showing 5 changed files with 22 additions and 9 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -19,6 +19,10 @@ on:
       - go.sum
       - examples/**
 
+permissions:
+  content: read
+  pull-requests: read
+
 jobs:
   permissions:
     content: read

diff --git a/.github/workflows/build_and_test_arm.yaml b/.github/workflows/build_and_test_arm.yaml
@@ -14,10 +14,11 @@ concurrency:
   group: ci-${{ inputs.flavor }}-aarch64-${{ github.head_ref || github.ref }}-${{ github.repository }}
   cancel-in-progress: true
 
-jobs:
+permissions:
+  content: read
+  pull-requests: read
 
-  permissions:
-    content: read
+jobs:
   build-iso:
     needs: detect
     runs-on: [self-hosted, arm64]

diff --git a/.github/workflows/build_and_test_x86.yaml b/.github/workflows/build_and_test_x86.yaml
@@ -11,9 +11,11 @@ concurrency:
   group: ci-${{ inputs.flavor }}-x86_64-${{ github.head_ref || github.ref }}-${{ github.repository }}
   cancel-in-progress: true
 
+permissions:
+  content: read
+  pull-requests: read
+
 jobs:
-  permissions:
-      content: read
   build-os:
     permissions:
       packages: write

diff --git a/.github/workflows/cli.yaml b/.github/workflows/cli.yaml
@@ -14,9 +14,12 @@ on:
   push:
     branches:
       - main
+
+permissions:
+  content: read
+  pull-requests: read
+
 jobs:
-  permissions:
-    content: read
   build:
     runs-on: ubuntu-latest
     steps:

diff --git a/.github/workflows/docs-publish.yaml b/.github/workflows/docs-publish.yaml
@@ -8,9 +8,12 @@ on:
       - main
   schedule:
    - cron: 0 20 * * *
+
+permissions:
+  content: read
+  pull-requests: read
+
 jobs:
-  permissions:
-    content: read
   build-deploy:
     runs-on: ubuntu-latest
     steps: