Skip to content

Commit f46d096

Browse files
committed
Add empty permissions block in Github Actions configs
To restrict all permissions by default (CodeQL warning)
1 parent f367738 commit f46d096

File tree

3 files changed

+7
-1
lines changed

3 files changed

+7
-1
lines changed

.github/workflows/build.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,9 @@ on:
1010
- v*
1111
pull_request:
1212

13+
permissions:
14+
contents: read
15+
1316
env:
1417
postgis_version: 3
1518
DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true

.github/workflows/trigger-doc-build.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,9 @@ on:
88
branches:
99
- docs
1010

11+
permissions:
12+
contents: read
13+
1114
jobs:
1215
build:
1316
runs-on: ubuntu-latest

EFCore.PG.slnx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
<Folder Name="/Github/">
1212
<File Path=".github/dependabot.yml" />
1313
<File Path=".github/workflows/build.yml" />
14-
<File Path=".github/workflows/codeql-analysis.yml" />
14+
<File Path=".github/workflows/trigger-doc-build.yml" />
1515
</Folder>
1616
<Folder Name="/src/">
1717
<Project Path="src/EFCore.PG.NodaTime/EFCore.PG.NodaTime.csproj" />

0 commit comments

Comments
 (0)