From 909848ecb809d64227e15282ce6cba19d3131ed4 Mon Sep 17 00:00:00 2001 From: Ashish Kurmi Date: Sun, 2 Oct 2022 14:13:29 -0700 Subject: [PATCH] ci: add minimum GitHub token permissions for workflows Signed-off-by: Ashish Kurmi --- .github/workflows/lock.yaml | 6 ++++++ .github/workflows/tests.yaml | 3 +++ 2 files changed, 9 insertions(+) diff --git a/.github/workflows/lock.yaml b/.github/workflows/lock.yaml index b4f763387..647fe9ddb 100644 --- a/.github/workflows/lock.yaml +++ b/.github/workflows/lock.yaml @@ -4,8 +4,14 @@ on: schedule: - cron: '0 0 * * *' +permissions: + contents: read + jobs: lock: + permissions: + issues: write # for dessant/lock-threads to lock issues + pull-requests: write # for dessant/lock-threads to lock PRs runs-on: ubuntu-latest steps: - uses: dessant/lock-threads@v3 diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml index ae3558b70..a34a8af29 100644 --- a/.github/workflows/tests.yaml +++ b/.github/workflows/tests.yaml @@ -16,6 +16,9 @@ on: - 'docs/**' - '*.md' - '*.rst' +permissions: + contents: read + jobs: tests: name: ${{ matrix.name }}