Skip to content

Commit f3447dc

Browse files
tacaswelltacaswell
committed
CI: Restrict default permissions
Reduces risk of arbitrary code is run by attacker.
1 parent ea07802 commit f3447dc

File tree

3 files changed

+6
-0
lines changed

3 files changed

+6
-0
lines changed

‎.github/workflows/docs.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: Documentation
2+
permissions:
3+
contents: read
24

35
on: [push, pull_request]
46

‎.github/workflows/flake8.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: Check Code Style
2+
permissions:
3+
contents: read
24

35
on: [push, pull_request]
46

‎.github/workflows/testing.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: Unit Tests
2+
permissions:
3+
contents: read
24

35
on: [push, pull_request]
46

0 commit comments

Comments
 (0)