ddidderr/zstd-rs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Make Github workflows permissions read-only by default (#3488)

Browse Source 
* Make Github workflows permissions read-only by default

* Pins `skx/github-action-publish-binaries` action to specific hash
This commit is contained in:
Yonatan Komornik
2023-02-13 16:57:05 -08:00
committed by GitHub
parent 886de7bc04
commit 727d03161f
3 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/dev-long-tests.yml
+2
View File
@@ -9,6 +9,8 @@ on:
pull_request: pull_request:
branches: [ dev, release, actionsTest ] branches: [ dev, release, actionsTest ]
permissions: read-all
jobs: jobs:
make-all: make-all:
runs-on: ubuntu-latest runs-on: ubuntu-latest
.github/workflows/dev-short-tests.yml
+2
View File
@@ -10,6 +10,8 @@ on:
pull_request: pull_request:
branches: [ dev, release, actionsTest ] branches: [ dev, release, actionsTest ]
permissions: read-all
jobs: jobs:
linux-kernel: linux-kernel:
runs-on: ubuntu-latest runs-on: ubuntu-latest
.github/workflows/publish-release-artifacts.yml
+2 -3
View File
@@ -5,8 +5,7 @@ on:
types: types:
- published - published
permissions: permissions: read-all
contents: read
jobs: jobs:
publish-release-artifacts: publish-release-artifacts:
@@ -68,7 +67,7 @@ jobs:
fi fi
- name: Publish - name: Publish
uses: skx/github-action-publish-binaries@release-2.0 uses: skx/github-action-publish-binaries@b9ca5643b2f1d7371a6cba7f35333f1461bbc703 # tag=release-2.0
env: env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with: with: