Add workflow read permissions (#148)

brisbanesocialchess · Dec 24, 2024 · 39d6de3 · 39d6de3
1 parent a0b9961
commit 39d6de3
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 1 deletion.
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
@@ -4,6 +4,9 @@ name: 'Pull Request Labeler'
 on:
   - pull_request_target
 
+permissions:
+  contents: read
+
 jobs:
   label:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
@@ -5,7 +5,8 @@ on: # yamllint disable-line rule:truthy
   push: null
   pull_request: null
 
-permissions: {}
+permissions:
+  contents: read
 
 jobs:
   build:

diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
@@ -3,6 +3,9 @@ name: Pre-commit
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   pre-commit:
     runs-on: ubuntu-latest