Minimize GITHUB_TOKEN permissions
Refs: https://github.blog/changelog/2021-04-20-github-actions-control-permissions-for-github_token
This commit is contained in:
parent
d66e007b3a
commit
07c3e4d5b9
|
@ -1,5 +1,8 @@
|
||||||
name: CI
|
name: CI
|
||||||
|
|
||||||
|
permissions:
|
||||||
|
contents: read
|
||||||
|
|
||||||
on:
|
on:
|
||||||
pull_request:
|
pull_request:
|
||||||
push:
|
push:
|
||||||
|
@ -94,6 +97,10 @@ jobs:
|
||||||
RUSTFLAGS: ${{ env.RUSTFLAGS }} -Z randomize-layout
|
RUSTFLAGS: ${{ env.RUSTFLAGS }} -Z randomize-layout
|
||||||
|
|
||||||
security_audit:
|
security_audit:
|
||||||
|
permissions:
|
||||||
|
checks: write
|
||||||
|
contents: read
|
||||||
|
issues: write
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v3
|
- uses: actions/checkout@v3
|
||||||
|
|
|
@ -1,5 +1,8 @@
|
||||||
name: Release
|
name: Release
|
||||||
|
|
||||||
|
permissions:
|
||||||
|
contents: write
|
||||||
|
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
tags:
|
tags:
|
||||||
|
|
Loading…
Reference in New Issue