GitHub Workflows security hardening (#7629)

* build: harden push.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

* build: harden deployment.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

* build: harden pr.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
Alex
2022-09-27 14:10:18 +02:00
committed by GitHub
parent e21cac75b5
commit a68c17d876
3 changed files with 11 additions and 0 deletions

View File

@@ -2,6 +2,9 @@ name: Pull Request Tests
on: [pull_request, workflow_dispatch]
permissions:
contents: read # to fetch code (actions/checkout)
jobs:
testPR:
runs-on: ubuntu-latest