ci: set token permissions to github workflows (#143)

* The top level permission for github workflows were set to be content read Signed-off-by: Joyce Brum <joycebrum@google.com>
google · Jan 11, 2024 · 1d8b6ea · 1d8b6ea
1 parent a2b2b32
commit 1d8b6ea
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.github/workflows/apidiff.yaml b/.github/workflows/apidiff.yaml
@@ -4,6 +4,8 @@ on:
   pull_request:
     branches:
       - master
+permissions:
+  contents: read
 jobs:
   compat:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
@@ -4,6 +4,8 @@ on:
   pull_request:
     branches:
       - master
+permissions:
+  contents: read
 jobs:
   unit-tests:
     strategy: