Skip to content

Commit a63d5bf

Browse files
committed
.github: workflows: build restrict permissions
Restrict default permission of the build workflows. Additionally, add a name to the build job. Signed-off-by: Thomas Stranger <[email protected]>
1 parent 656e517 commit a63d5bf

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

.github/workflows/build.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,12 @@ on:
66
schedule:
77
- cron: "0 0 * * *"
88

9+
permissions:
10+
contents: read
11+
912
jobs:
1013
build:
14+
name: Build app and tests
1115
strategy:
1216
fail-fast: false
1317
matrix:
@@ -18,6 +22,7 @@ jobs:
1822
uses: actions/checkout@v4
1923
with:
2024
path: example-application
25+
persist-credentials: false
2126

2227
- name: Set up Python
2328
uses: actions/setup-python@v5

0 commit comments

Comments
 (0)