Merge pull request #147 from SADiLaR/chore/ci-token-permission

chore(ci): set GitHub token permissions to read-only for all workflows
SADiLaR · Nov 7, 2024 · 0846ba5 · 0846ba5
2 parents 4410af2 + 6003097
commit 0846ba5
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/develop.yml b/.github/workflows/develop.yml
@@ -7,6 +7,8 @@ on:
     branches:
       - "main"
 
+permissions: read-all
+
 jobs:
   deploy_test:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/production.yml b/.github/workflows/production.yml
@@ -6,6 +6,8 @@ on:
     tags:
       - v**
 
+permissions: read-all
+
 jobs:
   docker_push:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/testing.yml b/.github/workflows/testing.yml
@@ -8,6 +8,8 @@ on:
       - develop
   pull_request:
 
+permissions: read-all
+
 jobs:
   test_project:
     runs-on: ubuntu-latest # operating system your code will run on