ci: set token permissions to github workflows

The top level permission for github workflows were set to be content read Signed-off-by: Joyce Brum <[email protected]>
google · Dec 6, 2023 · 4ab881d · 4ab881d
1 parent b35aa6a
commit 4ab881d
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.github/workflows/apidiff.yaml b/.github/workflows/apidiff.yaml
@@ -4,6 +4,8 @@ on:
   pull_request:
     branches:
       - master
+permissions:
+  contents: read
 jobs:
   compat:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
@@ -4,6 +4,8 @@ on:
   pull_request:
     branches:
       - master
+permissions:
+  contents: read
 jobs:
   unit-tests:
     strategy: