Merge pull request #79 from mindsdb/set-actions-rights

Set actions rights

Author: StpMax

.github/workflows/deploy.yml

@@ -10,12 +10,14 @@ jobs:
  #  Push a new release to PyPI
   deploy_to_pypi:
     name: Publish to PyPI
+    permissions:
+      contents: read
     runs-on: mdb-dev
     if: github.actor != 'mindsdbadmin'
     steps:
       - uses: actions/checkout@v4
       - name: Set up Python
-        uses: actions/setup-python@v5.1.0
+        uses: actions/setup-python@v5.6.0
         with:
           python-version: ${{ vars.CI_PYTHON_VERSION }}
       - name: Install dependencies

.github/workflows/test_on_deploy.yml

@@ -7,14 +7,16 @@ on:
 jobs:
   test:
     runs-on: mdb-dev
+    permissions:
+      contents: read
     strategy:
       matrix:
         python-version: ['3.10']
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5.6.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies

.github/workflows/test_on_pr.yml

@@ -7,16 +7,18 @@ on:
 
 jobs:
   test:
+    permissions:
+      contents: read
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
         os: [mdb-dev]
         python-version: ['3.8', '3.9', '3.10', '3.11']
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
 
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5.6.0
       with:
         python-version: ${{ matrix.python-version }}