read-only permissions for GitHub actions

kiwitcms · Feb 26, 2024 · 6bee838 · 6bee838
1 parent 61b85f9
commit 6bee838
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -1,5 +1,7 @@
 on: [push]
 
+permissions: read-all
+
 jobs:
   hello_world_job:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -1,6 +1,8 @@
 on:
   pull_request:
 
+permissions: read-all
+
 jobs:
   pr_container_job:
     runs-on: ubuntu-latest