ci: add minimum GitHub token permissions for workflows (#8169)

Signed-off-by: Varun Sharma <varunsh@stepsecurity.io>
2023-11-10 05:14:29 -08:00
parent bb04915809
commit 9bdbaef105
3 changed files with 9 additions and 0 deletions
--- a/.github/workflows/dependabot-merge.yml
+++ b/.github/workflows/dependabot-merge.yml
@@ -4,6 +4,9 @@ on:
  pull_request_target:
    branches: [ master, next ]

+permissions:
+  contents: read
+
 jobs:
  merge-me:
    name: Merge me!
--- a/.github/workflows/docker-image-check.yml
+++ b/.github/workflows/docker-image-check.yml
@@ -5,6 +5,9 @@ on:
  schedule:
    - cron:  '30 4 * * *'

+permissions:
+  contents: read
+
 jobs:
  build:
    runs-on: ubuntu-latest
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -12,6 +12,9 @@ on:
 env:
  CYPRESS_CACHE_FOLDER: cypress/cache

+permissions:
+  contents: read
+
 jobs:
  build:
    runs-on: ubuntu-latest