kyy/swagger-ui
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: add minimum GitHub token permissions for workflows (#8169)

Browse Source 
Signed-off-by: Varun Sharma <varunsh@stepsecurity.io>
This commit is contained in:
Varun Sharma
2023-11-10 05:14:29 -08:00
committed by GitHub
parent bb04915809
commit 9bdbaef105
3 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/dependabot-merge.yml vendored
View File

@@ -4,6 +4,9 @@ on:
pull_request_target: pull_request_target:
branches: [ master, next ] branches: [ master, next ]
permissions:
contents: read
jobs: jobs:
merge-me: merge-me:
name: Merge me! name: Merge me!

3
.github/workflows/docker-image-check.yml vendored
View File

@@ -5,6 +5,9 @@ on:
schedule: schedule:
- cron: '30 4 * * *' - cron: '30 4 * * *'
permissions:
contents: read
jobs: jobs:
build: build:
runs-on: ubuntu-latest runs-on: ubuntu-latest

3
.github/workflows/nodejs.yml vendored
View File

@@ -12,6 +12,9 @@ on:
env: env:
CYPRESS_CACHE_FOLDER: cypress/cache CYPRESS_CACHE_FOLDER: cypress/cache
permissions:
contents: read
jobs: jobs:
build: build:
runs-on: ubuntu-latest runs-on: ubuntu-latest