Skip to content

Commit a44d82f

Browse files
committed
Fix top level permissions in workflows again
Another attempt to get the permissions right! Signed-off-by: James Taylor <[email protected]>
1 parent 17198e9 commit a44d82f

File tree

5 files changed

+15
-0
lines changed

5 files changed

+15
-0
lines changed

.github/workflows/docker-build.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,11 @@ on:
1616
required: false
1717
type: string
1818

19+
permissions:
20+
contents: write
21+
packages: write
22+
id-token: write
23+
1924
jobs:
2025
build:
2126
runs-on: ubuntu-latest

.github/workflows/go-contract-image.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,8 @@ on:
1414
paths:
1515
- 'samples/go-contract/**'
1616

17+
permissions: read-all
18+
1719
jobs:
1820
docker_build:
1921
name: Docker build

.github/workflows/java-contract-image.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,8 @@ on:
1414
paths:
1515
- 'samples/java-contract/**'
1616

17+
permissions: read-all
18+
1719
jobs:
1820
docker_build:
1921
name: Docker build

.github/workflows/node-contract-image.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,8 @@ on:
1414
paths:
1515
- 'samples/node-contract/**'
1616

17+
permissions: read-all
18+
1719
jobs:
1820
docker_build:
1921
name: Docker build

.github/workflows/peer-image.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,10 @@ permissions: read-all
2323
jobs:
2424
docker_build:
2525
name: Docker build
26+
permissions:
27+
contents: write
28+
packages: write
29+
id-token: write
2630
uses: ./.github/workflows/docker-build.yml
2731
with:
2832
image-name: ghcr.io/hyperledger-labs/fabric-builder-k8s/k8s-fabric-peer

0 commit comments

Comments
 (0)