Skip to content

Commit 154092b

Browse files
boomanaiden154joaosaffran
authored andcommitted
[libc++][Github] Remove workflow-scoped write permissions (llvm#126447)
This patch removes the workflow-scoped package write permissions in the libcxx-build-containers workflow. The relevant permissions are already present in the job, so this raises the potential for new jobs being added to the workflow that do not need the permissions but having them anyways. Not having workflow-scoped write permissions is security best practice. Fixes llvm#126230.
1 parent 3f5cd44 commit 154092b

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

.github/workflows/libcxx-build-containers.yml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,6 @@ name: Build Docker images for libc++ CI
99

1010
permissions:
1111
contents: read
12-
packages: write
1312

1413
on:
1514
push:

0 commit comments

Comments
 (0)