Merge pull request #34 from bastelfreak/windows

CI: Set explicit token permissions

Author: bastelfreak

.github/workflows/apply.yaml

@@ -14,6 +14,9 @@ on:
       - rakelib/tests.rake
       - spec/**
 
+permissions:
+  contents: read
+
 env:
   BOLT_WINRM_USER: roddypiper
   BOLT_WINRM_HOST: localhost

.github/workflows/bolt_spec.yaml

@@ -15,6 +15,9 @@ on:
       - rakelib/tests.rake
       - spec/**
 
+permissions:
+  contents: read
+
 env:
   BOLT_WINRM_USER: roddypiper
   BOLT_WINRM_HOST: localhost

.github/workflows/docker_transport.yaml

@@ -14,6 +14,9 @@ on:
       - rakelib/tests.rake
       - spec/**
 
+permissions:
+  contents: read
+
 jobs:
   docker_transport:
     name: Docker Transport

.github/workflows/linux.yaml

@@ -14,6 +14,9 @@ on:
       - rakelib/tests.rake
       - spec/**
 
+permissions:
+  contents: read
+
 jobs:
   integration:
     name: Integration

.github/workflows/modules.yaml

@@ -14,6 +14,9 @@ on:
       - modules/**
       - rakelib/tests.rake
 
+permissions:
+  contents: read
+
 jobs:
   linux:
     name: Linux

.github/workflows/publish-powershell-module.yaml

@@ -8,6 +8,9 @@ on:
         required: true
         default: main
 
+permissions:
+  contents: read
+
 jobs:
   publish_module:
     name: Publish

.github/workflows/pwsh.yaml

@@ -9,6 +9,9 @@ on:
       - lib/bolt/bolt_option_parser.rb
       - rakelib/pwsh.rake
 
+permissions:
+  contents: read
+
 jobs:
 
   test:

.github/workflows/schemas.yaml

@@ -10,6 +10,9 @@ on:
       - rakelib/schemas.rake
       - schemas/*.json
 
+permissions:
+  contents: read
+
 jobs:
 
   generate:

.github/workflows/ssh_transport.yaml

@@ -14,6 +14,9 @@ on:
       - rakelib/tests.rake
       - spec/**
 
+permissions:
+  contents: read
+
 jobs:
   ssh_transport:
     name: SSH Transport

.github/workflows/windows.yaml

@@ -1,3 +1,4 @@
+---
 name: Windows
 
 on:
@@ -21,6 +22,9 @@ env:
   BOLT_WINRM_SSL_PORT: 5986
   BOLT_WINRM_SMB_PORT: 445
 
+permissions:
+  contents: read
+
 jobs:
   integration:
     name: Integration