diff options
| author | Alex <[email protected]> | 2022-09-26 11:15:07 +0200 |
|---|---|---|
| committer | GitHub <[email protected]> | 2022-09-26 09:15:07 +0000 |
| commit | 7438a8ad2b0cc74143323fa7cc72f7b4e9a4831a (patch) | |
| tree | 06e518c865137d74c6158b7d3d4ba9a20061521a | |
| parent | 8dcb5841f0a6b0ba9eb1b1ebff123118647ab04b (diff) | |
| download | faker-7438a8ad2b0cc74143323fa7cc72f7b4e9a4831a.tar.xz faker-7438a8ad2b0cc74143323fa7cc72f7b4e9a4831a.zip | |
ci: workflows security hardening (#1385)
| -rw-r--r-- | .github/workflows/ci.yml | 3 | ||||
| -rw-r--r-- | .github/workflows/semantic-pull-request.yml | 5 |
2 files changed, 8 insertions, 0 deletions
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 37b5b340..a05df2ec 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -6,6 +6,9 @@ on: - main pull_request: +permissions: + contents: read # to fetch code (actions/checkout) + jobs: unit-test: runs-on: ${{ matrix.os }} diff --git a/.github/workflows/semantic-pull-request.yml b/.github/workflows/semantic-pull-request.yml index d9d745e3..43683e3d 100644 --- a/.github/workflows/semantic-pull-request.yml +++ b/.github/workflows/semantic-pull-request.yml @@ -7,8 +7,13 @@ on: - edited - synchronize +permissions: {} jobs: main: + permissions: + pull-requests: read # to analyze PRs (amannn/action-semantic-pull-request) + statuses: write # to mark status of analyzed PR (amannn/action-semantic-pull-request) + runs-on: ubuntu-latest name: Semantic Pull Request steps: |