Skip to content

Commit 51f7634

Browse files
Copilotnirukk52
andcommitted
Add explicit permissions to workflow jobs for security
Co-authored-by: nirukk52 <[email protected]>
1 parent 688ddcf commit 51f7634

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

.github/workflows/ci.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,8 @@ jobs:
1515
lint:
1616
name: Lint
1717
runs-on: ubuntu-latest
18+
permissions:
19+
contents: read
1820

1921
steps:
2022
- name: Checkout code
@@ -52,6 +54,8 @@ jobs:
5254
backend:
5355
name: Backend
5456
runs-on: ubuntu-latest
57+
permissions:
58+
contents: read
5559

5660
steps:
5761
- name: Checkout code
@@ -78,6 +82,8 @@ jobs:
7882
frontend:
7983
name: Frontend
8084
runs-on: ubuntu-latest
85+
permissions:
86+
contents: read
8187

8288
steps:
8389
- name: Checkout code
@@ -108,6 +114,7 @@ jobs:
108114
runs-on: ubuntu-latest
109115
needs: [lint, backend, frontend]
110116
if: always()
117+
permissions: {}
111118

112119
steps:
113120
- name: Check job results

0 commit comments

Comments
 (0)