Skip to content

Commit dadd7dd

Browse files
tacaswelltacaswell
committed
CI: Restrict default permissions
Reduces risk of arbitrary code is run by attacker.
1 parent da99055 commit dadd7dd

File tree

2 files changed

+4
-0
lines changed

2 files changed

+4
-0
lines changed

‎.github/workflows/lint.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
---
22

33
name: Linting
4+
permissions:
5+
contents: read
46
on: [pull_request]
57

68
jobs:

‎.github/workflows/tests.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
---
22

33
name: Tests
4+
permissions:
5+
contents: read
46
on: [push, pull_request]
57

68
jobs:

0 commit comments

Comments
 (0)