Skip to content

Commit 6b1d557

Browse files
committed
SAST fixes for permission issues in github workflow files
1 parent abd25de commit 6b1d557

4 files changed

Lines changed: 12 additions & 0 deletions

File tree

.github/workflows/license-audit.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,9 @@ name: license audit
22

33
on: [push, pull_request]
44

5+
permissions:
6+
contents: read
7+
58
jobs:
69
license-audit:
710
runs-on: ubuntu-latest

.github/workflows/maze-runner.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,9 @@ name: maze-runner
22

33
on: [push, pull_request]
44

5+
permissions:
6+
contents: read
7+
58
jobs:
69
rake-maze-runner:
710
strategy:

.github/workflows/run-maze-runner.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,9 @@ on:
2222
required: false
2323
type: string
2424

25+
permissions:
26+
contents: read
27+
2528
jobs:
2629
maze-runner:
2730
runs-on: ubuntu-latest

.github/workflows/test-package.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,9 @@ name: test
22

33
on: [push, pull_request]
44

5+
permissions:
6+
contents: read
7+
58
jobs:
69
specs:
710
runs-on: ${{ matrix.os || 'ubuntu-latest' }}

0 commit comments

Comments
 (0)