Skip to content

Fix workflow permissions. #367

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Aug 14, 2025
Merged

Fix workflow permissions. #367

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
14b7381
Fix workflow permissions.
cwize1 Aug 11, 2025
c3ccaed
Missed a couple of files
cwize1 Aug 12, 2025
d6919c7
Fix osmodifier workflow permissions
cwize1 Aug 14, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 1 addition & 2 deletions .github/workflows/binary-build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,7 @@

name: Build binary and container for single arch

permissions:
contents: read
permissions: {}

on:
workflow_call:
Expand Down
9 changes: 5 additions & 4 deletions .github/workflows/build-dev.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,10 +3,7 @@

name: Build (dev)

permissions:
contents: read
# Azure login.
id-token: write
permissions: {}

on:
pull_request:
Expand Down Expand Up @@ -34,3 +31,7 @@ jobs:
publishType: dev
runFunctionalTests: ${{ inputs.runFunctionalTests || false }}
runVMTests: ${{ inputs.runVMTests || false }}
permissions:
contents: read
# Azure login.
id-token: write
9 changes: 5 additions & 4 deletions .github/workflows/build-main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,10 +3,7 @@

name: Build (main)

permissions:
contents: read
# Azure login.
id-token: write
permissions: {}

on:
push:
Expand All @@ -16,6 +13,10 @@ on:
jobs:
build:
uses: ./.github/workflows/build.yml
permissions:
contents: read
# Azure login.
id-token: write
with:
publishType: main
runFunctionalTests: true
Expand Down
9 changes: 5 additions & 4 deletions .github/workflows/build-preview.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,10 +3,7 @@

name: Build (preview)

permissions:
contents: read
# Azure login.
id-token: write
permissions: {}

on:
push:
Expand All @@ -16,6 +13,10 @@ on:
jobs:
build:
uses: ./.github/workflows/build.yml
permissions:
contents: read
# Azure login.
id-token: write
with:
publishType: preview
runFunctionalTests: true
Expand Down
75 changes: 64 additions & 11 deletions .github/workflows/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,10 +3,7 @@

name: Build binary, container, and docs

permissions:
contents: read
# Azure login.
id-token: write
permissions: {}

on:
workflow_call:
Expand All @@ -31,16 +28,22 @@ jobs:
with:
publishType: ${{ inputs.publishType }}
arch: amd64
permissions:
contents: read

binary-build-arm64:
name: Build ARM64
uses: ./.github/workflows/binary-build.yml
with:
publishType: ${{ inputs.publishType }}
arch: arm64
permissions:
contents: read

build-docs:
uses: ./.github/workflows/docs-build.yml
permissions:
contents: read

tests-functional-azl3-amd64:
name: Functional tests AZL3 AMD64
Expand All @@ -49,14 +52,22 @@ jobs:
with:
hostArch: amd64
hostDistro: azl3
permissions:
contents: read
# Azure login.
id-token: write

tests-functional-azl3-arm64:
name: Functional tests AZL3 ARM64
if: ${{ inputs.runFunctionalTests }}
uses: ./.github/workflows/tests-functional.yml
with:
hostArch: arm64
hostDistro: azl3
name: Functional tests AZL3 ARM64
if: ${{ inputs.runFunctionalTests }}
uses: ./.github/workflows/tests-functional.yml
with:
hostArch: arm64
hostDistro: azl3
permissions:
contents: read
# Azure login.
id-token: write

tests-functional-ubuntu2404-amd64:
name: Functional tests Ubuntu24.04 AMD64
Expand All @@ -65,6 +76,10 @@ jobs:
with:
hostArch: amd64
hostDistro: ubuntu2404
permissions:
contents: read
# Azure login.
id-token: write

tests-functional-ubuntu2404-arm64:
name: Functional tests Ubuntu24.04 ARM64
Expand All @@ -73,6 +88,10 @@ jobs:
with:
hostArch: arm64
hostDistro: ubuntu2404
permissions:
contents: read
# Azure login.
id-token: write

imagecreator-tests-functional-azl3-amd64:
name: Functional tests AZL3 AMD64
Expand All @@ -81,6 +100,8 @@ jobs:
with:
hostArch: amd64
hostDistro: azl3
permissions:
contents: read

imagecreator-tests-functional-ubuntu2404-amd64:
name: Functional tests Ubuntu24.04 AMD64
Expand All @@ -89,6 +110,8 @@ jobs:
with:
hostArch: amd64
hostDistro: ubuntu2404
permissions:
contents: read

tests-vmtests-azl3-amd64:
name: VMTests suite AZL3 AMD64
Expand All @@ -98,6 +121,10 @@ jobs:
with:
hostArch: amd64
hostDistro: azl3
permissions:
contents: read
# Azure login.
id-token: write

tests-vmtests-ubuntu2404-amd64:
name: VMTests suite Ubuntu24.04 AMD64
Expand All @@ -107,6 +134,10 @@ jobs:
with:
hostArch: amd64
hostDistro: ubuntu2404
permissions:
contents: read
# Azure login.
id-token: write

tests-vmtests-ubuntu2404-arm64:
name: VMTests suite Ubuntu24.04 ARM64
Expand All @@ -116,6 +147,10 @@ jobs:
with:
hostArch: arm64
hostDistro: ubuntu2404
permissions:
contents: read
# Azure login.
id-token: write

tests-vmtests-imagecreator-azl3-amd64:
name: VMTests suite image creator AZL3 AMD64
Expand All @@ -125,6 +160,8 @@ jobs:
with:
hostArch: amd64
hostDistro: azl3
permissions:
contents: read

tests-vmtests-imagecreator-ubuntu2404-amd64:
name: VMTests suite image creator Ubuntu24.04 AMD64
Expand All @@ -133,7 +170,9 @@ jobs:
uses: ./.github/workflows/tests-vmtests-imagecreator.yml
with:
hostArch: amd64
hostDistro: ubuntu2404
hostDistro: ubuntu2404
permissions:
contents: read

tests-vmtests-imagecreator-ubuntu2404-arm64:
name: VMTests suite image creator Ubuntu24.04 ARM64
Expand All @@ -143,6 +182,8 @@ jobs:
with:
hostArch: arm64
hostDistro: ubuntu2404
permissions:
contents: read

tests-vmtests-osmodifier-azl3-amd64:
name: VMTests suite osmodifier AZL3 AMD64
Expand All @@ -152,6 +193,10 @@ jobs:
with:
hostArch: amd64
hostDistro: azl3
permissions:
contents: read
# Azure login.
id-token: write

tests-vmtests-osmodifier-ubuntu2404-amd64:
name: VMTests suite osmodifier Ubuntu24.04 AMD64
Expand All @@ -161,6 +206,10 @@ jobs:
with:
hostArch: amd64
hostDistro: ubuntu2404
permissions:
contents: read
# Azure login.
id-token: write

tests-vmtests-osmodifier-ubuntu2404-arm64:
name: VMTests suite osmodifier Ubuntu24.04 ARM64
Expand All @@ -170,3 +219,7 @@ jobs:
with:
hostArch: arm64
hostDistro: ubuntu2404
permissions:
contents: read
# Azure login.
id-token: write
3 changes: 1 addition & 2 deletions .github/workflows/docs-build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
name: Build docs

permissions:
contents: read
permissions: {}

on:
workflow_call: {}
Expand Down
4 changes: 1 addition & 3 deletions .github/workflows/fork-release-branch.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,9 +3,7 @@

name: Fork release branch

permissions:
# Create release branch.
contents: write
permissions: {}

on:
workflow_call: {}
Expand Down
3 changes: 1 addition & 2 deletions .github/workflows/imagecreator-tests-functional.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,7 @@

name: Tests Image Creator functional

permissions:
contents: read
permissions: {}

on:
workflow_call:
Expand Down
6 changes: 1 addition & 5 deletions .github/workflows/open-bump-version-pr.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,11 +3,7 @@

name: Open bump version PR

permissions:
# Create release branch and publish release.
contents: write
# Publish PR.
#pull-requests: write
permissions: {}

on:
workflow_call: {}
Expand Down
6 changes: 1 addition & 5 deletions .github/workflows/publish-container.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,6 @@
name: Publish container to GHCR

permissions:
# "Keyless" container signing
id-token: write
# Publish to GHCR.
packages: write
permissions: {}

on:
workflow_call: {}
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/publish-github-pages.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ jobs:
deploy:
name: Publish GitHub pages
permissions:
# GitHub pages publish.
pages: write
id-token: write
environment:
Expand Down
4 changes: 1 addition & 3 deletions .github/workflows/publish-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,9 +3,7 @@

name: Publish release

permissions:
# Create release tag and publish release.
contents: write
permissions: {}

on:
workflow_call:
Expand Down
Loading
Loading