Set permissions for workflows.

https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
This commit is contained in:
Fabio Niephaus 2022-08-05 10:19:50 +02:00
parent e82ef137ec
commit c2b9039d01
No known key found for this signature in database
GPG Key ID: F21CF5275F31DFD6
2 changed files with 4 additions and 0 deletions

View File

@ -16,6 +16,8 @@ on:
paths-ignore:
- '**.md'
workflow_dispatch:
permissions:
contents: read
jobs:
check-dist:

View File

@ -8,6 +8,8 @@ on:
paths-ignore:
- '**.md'
workflow_dispatch:
permissions:
contents: read
jobs:
build: # make sure build/ci work properly