Merge remote-tracking branch 'origin/master'

2022-09-27 11:57:15 -04:00
parent 48a5ae443f a68c17d876
commit f7a34cfa46
3 changed files with 11 additions and 0 deletions
--- a/.github/workflows/deployment.yml
+++ b/.github/workflows/deployment.yml
@@ -5,8 +5,12 @@ on:
    tags:
      - 'v*'

+permissions: {}
 jobs:
  deploy:
+    permissions:
+      contents: write # for release creation (svenstaro/upload-release-action)
+
    runs-on: ubuntu-latest

    steps:
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -2,6 +2,9 @@ name: Pull Request Tests

 on: [pull_request, workflow_dispatch]

+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
  testPR:
    runs-on: ubuntu-latest
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -2,8 +2,12 @@ name: Tests

 on: [push, workflow_dispatch]

+permissions: {}
 jobs:
  runPush:
+    permissions:
+      contents: write # for Update bundles
+
    runs-on: ubuntu-latest

    steps: