Skip to content

Commit bf37c32

Browse files
authored
Github-actions set permissions (#33)
* chore(deps): update pnpm-lock.yaml * chore(actions): update github actions
1 parent 5c7c033 commit bf37c32

File tree

4 files changed

+15
-0
lines changed

4 files changed

+15
-0
lines changed

.github/workflows/ci.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,10 @@ on:
99
jobs:
1010
build:
1111
runs-on: ubuntu-latest
12+
permissions:
13+
contents: read
14+
pull-requests: write
15+
checks: write
1216

1317
strategy:
1418
matrix:

.github/workflows/pr-changelog.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,9 @@ jobs:
99
validate-pr:
1010
name: Validate PR Description
1111
runs-on: ubuntu-latest
12+
permissions:
13+
pull-requests: write
14+
issues: write
1215

1316
steps:
1417
- name: Check PR Description

.github/workflows/release.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,10 @@ jobs:
88
release:
99
name: Release
1010
runs-on: ubuntu-latest
11+
permissions:
12+
contents: write
13+
issues: write
14+
pull-requests: write
1115

1216
steps:
1317
- name: Checkout

.github/workflows/version-bump.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,10 @@ jobs:
88
version-bump:
99
name: Version Bump
1010
runs-on: ubuntu-latest
11+
permissions:
12+
contents: write
13+
issues: write
14+
pull-requests: write
1115
if: "!contains(github.event.head_commit.message, 'skip ci') && !contains(github.event.head_commit.message, 'chore(release)')"
1216

1317
steps:

0 commit comments

Comments
 (0)