Skip to content

Commit 5fab4a8

Browse files
committed
Revoke permissions that are not yet needed
There will be upcoming patches for LAVA testing on PR that require extra permissions, but as they are not available yet, ensure to only allow permissions needed for the workflows currently defined. Signed-off-by: Matt Hart <[email protected]>
1 parent 24bce32 commit 5fab4a8

File tree

2 files changed

+0
-16
lines changed

2 files changed

+0
-16
lines changed

.github/workflows/build-on-pr.yml

Lines changed: 0 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -4,21 +4,9 @@ on:
44
pull_request:
55

66
permissions:
7-
checks: write
8-
pull-requests: write
97
contents: read
10-
packages: read
118

129
jobs:
13-
event-file:
14-
name: "Upload event file"
15-
runs-on: ubuntu-latest
16-
steps:
17-
- name: Upload
18-
uses: actions/upload-artifact@v4
19-
with:
20-
name: Event File
21-
path: ${{ github.event_path }}
2210
build-pr:
2311
uses: ./.github/workflows/debos.yml
2412

.github/workflows/daily.yml

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,12 +7,8 @@ on:
77
# allow manual runs
88
workflow_dispatch:
99

10-
1110
permissions:
12-
checks: write
13-
pull-requests: write
1411
contents: read
15-
packages: read
1612

1713
jobs:
1814
build-daily:

0 commit comments

Comments
 (0)