Minimize GITHUB_TOKEN permissions

Refs: https://github.blog/changelog/2021-04-20-github-actions-control-permissions-for-github_token
This commit is contained in:
Taiki Endo 2023-03-26 16:35:52 +09:00
parent 811dee59ac
commit 99b9abc536
2 changed files with 10 additions and 0 deletions

View File

@ -1,5 +1,8 @@
name: CI name: CI
permissions:
contents: read
on: on:
pull_request: pull_request:
push: push:
@ -73,6 +76,10 @@ jobs:
- run: cargo fmt --all --check - run: cargo fmt --all --check
security_audit: security_audit:
permissions:
checks: write
contents: read
issues: write
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v3 - uses: actions/checkout@v3

View File

@ -1,5 +1,8 @@
name: Release name: Release
permissions:
contents: write
on: on:
push: push:
tags: tags: