Constrain GH Actions workflows permissions (#1567)

2021-10-23 21:57:26 +02:00 · 2021-10-23 21:57:26 +02:00 · b7e3413a33
parent f0320a6c12
commit b7e3413a33
2 changed files with 7 additions and 0 deletions
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@ -10,6 +10,10 @@ on:
      - Dockerfile
      - .github/workflows/docker.yml

+permissions:
+  contents: read
+  packages: write
+
 jobs:
  build:
    runs-on: ubuntu-latest
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@ -7,6 +7,9 @@ on:

  pull_request:

+permissions:
+  contents: read
+
 jobs:
  build:
    runs-on: ubuntu-latest