Merge pull request #4657 from MidnightCommander/feature/update-workflows

maint: specify permissions and timeouts for all workflows
MidnightCommander · Feb 28, 2025 · a5980f5 · a5980f5
2 parents 0eef293 + 4efc37d
commit a5980f5
Show file tree

Hide file tree

Showing 8 changed files with 31 additions and 4 deletions.
diff --git a/.github/workflows/ci-alpine.yml b/.github/workflows/ci-alpine.yml
@@ -6,9 +6,13 @@ on:
 jobs:
   build-alpine:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
+
     container:
       image: alpine:latest
-    timeout-minutes: 5
+
+    permissions:
+      contents: read
 
     steps:
       - uses: actions/checkout@v4

diff --git a/.github/workflows/ci-fedora.yml b/.github/workflows/ci-fedora.yml
@@ -6,9 +6,13 @@ on:
 jobs:
   build-fedora:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
+
     container:
       image: fedora:latest
-    timeout-minutes: 5
+
+    permissions:
+      contents: read
 
     steps:
       - name: Install git inside container

diff --git a/.github/workflows/ci-freebsd.yml b/.github/workflows/ci-freebsd.yml
@@ -14,6 +14,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
 
+    permissions:
+      contents: read
+
     steps:
       - uses: actions/checkout@v4
 

diff --git a/.github/workflows/ci-macos.yml b/.github/workflows/ci-macos.yml
@@ -14,6 +14,9 @@ jobs:
     runs-on: macos-latest
     timeout-minutes: 5
 
+    permissions:
+      contents: read
+
     steps:
       - uses: actions/checkout@v4
 

diff --git a/.github/workflows/ci-solaris.yml b/.github/workflows/ci-solaris.yml
@@ -8,6 +8,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
 
+    permissions:
+      contents: read
+
     steps:
       - uses: actions/checkout@v4
 

diff --git a/.github/workflows/ci-ubuntu.yml b/.github/workflows/ci-ubuntu.yml
@@ -8,6 +8,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
 
+    permissions:
+      contents: read
+
     steps:
       - uses: actions/checkout@v4
 

diff --git a/.github/workflows/transifex.yml b/.github/workflows/transifex.yml
@@ -10,9 +10,11 @@ concurrency:
 
 jobs:
   transifex-upload:
-
     runs-on: ubuntu-latest
-    timeout-minutes: 15
+    timeout-minutes: 5
+
+    permissions:
+      contents: read
 
     steps:
       - uses: actions/checkout@v4

diff --git a/.github/workflows/update-sources.yml b/.github/workflows/update-sources.yml
@@ -11,6 +11,11 @@ concurrency:
 jobs:
   update-sources:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
+
+    permissions:
+      contents: read
+
     steps:
       - uses: actions/checkout@v4