Skip to content

Add minimum token permissions for all github workflow files#4155

Merged
swiatekm merged 2 commits intoopen-telemetry:mainfrom
opentelemetrybot:token-permissions
Jul 7, 2025
Merged

Add minimum token permissions for all github workflow files#4155
swiatekm merged 2 commits intoopen-telemetry:mainfrom
opentelemetrybot:token-permissions

Conversation

@opentelemetrybot
Copy link
Copy Markdown
Contributor

See open-telemetry/sig-security#148 for details.

Please check this PR carefully and watch out for any permission-related workflow failures after merging it.

cc @trask

@opentelemetrybot opentelemetrybot requested a review from a team as a code owner July 1, 2025 03:54
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Jul 1, 2025

E2E Test Results

 33 files  ±0  219 suites  ±0   3h 49m 19s ⏱️ - 5m 16s
 83 tests ±0   82 ✅ ±0  0 💤 ±0  1 ❌ ±0 
219 runs  ±0  218 ✅ ±0  0 💤 ±0  1 ❌ ±0 

For more details on these failures, see this check.

Results for commit 81ff63d. ± Comparison against base commit f44e6a9.

♻️ This comment has been updated with latest results.

@swiatekm swiatekm added the Skip Changelog PRs that do not require a CHANGELOG.md entry label Jul 1, 2025
Copy link
Copy Markdown
Contributor

@swiatekm swiatekm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks correct to me. It's mostly moving permissions from workflow level to job level. I'd like more eyes on it before we merge though.

@swiatekm swiatekm enabled auto-merge (squash) July 7, 2025 13:21
@swiatekm swiatekm merged commit de7d1eb into open-telemetry:main Jul 7, 2025
87 of 90 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Skip Changelog PRs that do not require a CHANGELOG.md entry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants