ci: add minimum GitHub token permissions for workflows (#8169)

varunsh-coder · web-flow · commit 9bdbaef105b3 · 2023-11-10T14:14:29.000+01:00
Signed-off-by: Varun Sharma &lt;varunsh@stepsecurity.io&gt;
diff --git a/.github/workflows/dependabot-merge.yml b/.github/workflows/dependabot-merge.yml
@@ -4,6 +4,9 @@ on:
   pull_request_target:
     branches: [ master, next ]
 
+permissions:
+  contents: read
+
 jobs:
   merge-me:
     name: Merge me!
diff --git a/.github/workflows/docker-image-check.yml b/.github/workflows/docker-image-check.yml
@@ -5,6 +5,9 @@ on:
   schedule:
     - cron:  '30 4 * * *'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
@@ -12,6 +12,9 @@ on:
 env:
   CYPRESS_CACHE_FOLDER: cypress/cache
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
