Merge pull request #551 from souleb/token-permissions

Add Permissions to github Workflows
fluxcd · Jan 20, 2022 · e1655b6 · e1655b6
2 parents d1ab4d7 + 53fa1f9
commit e1655b6
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 0 deletions.
diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
@@ -6,6 +6,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read # for actions/checkout to fetch code
+
 jobs:
 
   kind-linux-amd64:

diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
@@ -7,6 +7,9 @@ on:
 env:
   REPOSITORY: ${{ github.repository }}
 
+permissions:
+  contents: read # for actions/checkout to fetch code
+
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/scan.yaml b/.github/workflows/scan.yaml
@@ -8,6 +8,10 @@ on:
   schedule:
     - cron: '18 10 * * 3'
 
+permissions:
+  contents: read # for actions/checkout to fetch code
+  security-events: write # for codeQL to write security events
+
 jobs:
   fossa:
     name: FOSSA