summaryrefslogtreecommitdiff
path: root/.github/workflows
diff options
context:
space:
mode:
authorNaveen <172697+naveensrinivasan@users.noreply.github.com>2022-05-16 15:35:41 -0500
committerGitHub <noreply@github.com>2022-05-16 14:35:41 -0600
commitb17cfe132133c7fcaf03a0cd9441f4dfa27cde82 (patch)
tree4b6b5a0dd9289a76acac96efd04c646be7ced42b /.github/workflows
parentc0224d7619825b36f0e12fc2a1c91fa592a074ce (diff)
set permissions for GitHub actions (PR #2167)
Diffstat (limited to '.github/workflows')
-rw-r--r--.github/workflows/ci.yml5
-rw-r--r--.github/workflows/upstream-dispatch.yml3
2 files changed, 8 insertions, 0 deletions
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fcfa1949..08c119b1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,8 +9,13 @@ on:
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
+
+permissions: read-all
+
jobs:
activate:
+ permissions:
+ contents: none
if: |
(github.event_name == 'schedule' && github.repository_owner == 'asciidoctor') ||
(github.event_name == 'push') ||
diff --git a/.github/workflows/upstream-dispatch.yml b/.github/workflows/upstream-dispatch.yml
index e7d6e7e1..f1e94705 100644
--- a/.github/workflows/upstream-dispatch.yml
+++ b/.github/workflows/upstream-dispatch.yml
@@ -1,5 +1,8 @@
name: Upstream Dispatch
on: repository_dispatch
+
+permissions: read-all
+
jobs:
build:
name: ${{ github.event.client_payload.message }}