chore(workflows): cleanup workflow permissions and names (#1369)

* chore(workflows): cleanup workflow permissions and names * update CODEOWNERS
DeFiCh · Apr 23, 2022 · 60f0d27 · 60f0d27
1 parent 577787e
commit 60f0d27
Show file tree

Hide file tree

Showing 5 changed files with 32 additions and 15 deletions.
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
@@ -23,6 +23,8 @@
 /docs/legacy/                                   @fuxingloh @eli-lim
 /apps/legacy-api/                               @fuxingloh @joeldavidw @eli-lim
 
+/apps/status-api/                               @fuxingloh @joeldavidw @nichellekoh
+
 /docs/ocean/                                    @fuxingloh @canonbrother @ivan-zynesis
 /apps/ocean-api/                                @fuxingloh @canonbrother @kodemon
 /packages/ocean-api-client/                     @fuxingloh @canonbrother @kodemon
@@ -44,8 +46,8 @@
 /packages/jellyfish-crypto/                     @fuxingloh @ivan-zynesis @surangap
 /packages/jellyfish-transaction-signature/      @fuxingloh @ivan-zynesis @surangap
 
-/packages/jellyfish-wallet/                     @fuxingloh @ivan-zynesis @monstrobishi
-/packages/jellyfish-wallet-classic/             @fuxingloh @ivan-zynesis @monstrobishi
+/packages/jellyfish-wallet/                     @fuxingloh @ivan-zynesis
+/packages/jellyfish-wallet-classic/             @fuxingloh @ivan-zynesis
 /packages/jellyfish-wallet-encrypted/           @fuxingloh @ivan-zynesis
 /packages/jellyfish-wallet-mnemonic/            @fuxingloh @ivan-zynesis
 

diff --git a/.github/workflows/oss-governance-bot.yml b/.github/workflows/oss-governance-bot.yml
@@ -1,4 +1,4 @@
-name: Governance
+name: OSS Governance
 
 on:
   pull_request_target:
@@ -8,12 +8,15 @@ on:
   issue_comment:
     types: [ created ]
 
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
+  statuses: write
+  checks: write
+
 jobs:
-  main:
-    name: OSS
+  Bot:
     runs-on: ubuntu-latest
     steps:
       - uses: BirthdayResearch/oss-governance-bot@23a023a59e633947923a299f0497371576e12e78
-        with:
-          github-token: ${{ secrets.DEFICHAIN_BOT_GITHUB_TOKEN }}
-
diff --git a/.github/workflows/oss-governance-labeler.yml b/.github/workflows/oss-governance-labeler.yml
@@ -1,15 +1,20 @@
-name: Governance
+name: OSS Governance
 
 on:
   pull_request_target:
     types: [ opened, edited, synchronize ]
 
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
+  statuses: write
+  checks: write
+
 jobs:
-  labeler:
-    name: Labeler
+  Labeler:
     runs-on: ubuntu-latest
     steps:
       - uses: fuxingloh/multi-labeler@67208f475e36fc4f95e3d5a2d4e450433f288be8
         with:
-          github-token: ${{ secrets.DEFICHAIN_BOT_GITHUB_TOKEN }}
           config-path: .github/labeler.yml
diff --git a/.github/workflows/sync-labels.yml → .github/workflows/oss-governance-labels.yml b/.github/workflows/sync-labels.yml → .github/workflows/oss-governance-labels.yml
@@ -1,13 +1,16 @@
-name: Labels
+name: OSS Governance
 
 on:
   push:
     branches: [ main ]
     paths: [ .github/labels.yml ]
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
-  main:
-    name: Syncer
+  Labels:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b

diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
@@ -4,6 +4,10 @@ on:
   push:
     branches: [ main ]
 
+permissions:
+  contents: write
+  pull-requests: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.ref }}
   cancel-in-progress: true