common: add some permissions

pmem · Jan 30, 2025 · 540e28d · 540e28d
1 parent e285cda
commit 540e28d
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/.github/workflows/scan_coverage.yml b/.github/workflows/scan_coverage.yml
@@ -7,6 +7,11 @@ on:
       CODECOV_TOKEN:
         required: true
 
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
 env:
   # Note: All coverage scans, e.g. on pull requests, should be run in the same
   # environment.
@@ -24,8 +29,6 @@ env:
   TEST_BUILD:   debug
   FAULT_INJECTION: 1
 
-permissions: {}
-
 jobs:
   linux:
     name: Linux

diff --git a/.github/workflows/scans.yml b/.github/workflows/scans.yml
@@ -33,6 +33,10 @@ jobs:
     secrets:
       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
     name: Coverage
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
   call-documentation:
     uses: ./.github/workflows/scan_documentation.yml
     name: Documentation