Fix workflows permissions

rsksmart · Oct 17, 2024 · 591fbd8 · 591fbd8
1 parent 3f3a012
commit 591fbd8
Show file tree

Hide file tree

Showing 5 changed files with 14 additions and 4 deletions.
diff --git a/.github/workflows/build-push-docker.yml b/.github/workflows/build-push-docker.yml
@@ -4,6 +4,9 @@ on:
     tags:
       - '*'
 
+# Declare default permissions as read only.
+permissions: read-all
+
 env:
   GHCR_REPO: "ghcr.io/rsksmart/powpeg-node"
   DOCKERHUB_REPO: "rsksmart/powpeg-node"

diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
@@ -10,8 +10,8 @@ on:
     branches:
       - "**"
 
-permissions:
-  contents: read
+# Declare default permissions as read only.
+permissions: read-all
 
 jobs:
   verify_files:

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -1,6 +1,7 @@
 name: 'Dependency Review'
 on: [pull_request]
 
+# Declare default permissions as read only.
 permissions: read-all
 
 jobs:

diff --git a/.github/workflows/reproducible.yml b/.github/workflows/reproducible.yml
@@ -1,8 +1,11 @@
 name: Reproducible build
 on:
   release:
-      type:
-        - created
+    types:
+      - created
+
+# Declare default permissions as read only.
+permissions: read-all
 
 jobs:
   build:

diff --git a/.github/workflows/rit.yml b/.github/workflows/rit.yml
@@ -15,6 +15,9 @@ on:
         required: false
         default: 'master'
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   rootstock-integration-tests:
     name: Rootstock Integration Tests