matous-volf/todo-baggins
matous-volf/todo-baggins
1
0
Fork 0
Code Issues 23 Pull Requests Actions Projects 1 Activity

ci: restrict the CI actions permissions

Browse Source
This commit is contained in:
Matouš Volf 2024-08-15 13:50:01 +02:00
parent 943f0d48ca
commit 2d1f1aa05b
3 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
.github/workflows/conventional-commits.yml vendored
View File

@ -4,10 +4,17 @@ on:
pull_request: pull_request:
types: [ opened, synchronize, reopened, edited ] types: [ opened, synchronize, reopened, edited ]
permissions: { }
jobs: jobs:
build: build:
name: conventional commits name: conventional commits
runs-on: ubuntu-22.04 runs-on: ubuntu-22.04
permissions:
contents: read
pull-requests: read
packages: read
statuses: write
steps: steps:
- name: checkout code - name: checkout code
uses: actions/checkout@v3 uses: actions/checkout@v3

7
.github/workflows/conventional-pull-requests.yml vendored
View File

@ -4,10 +4,17 @@ on:
pull_request: pull_request:
types: [ opened, synchronize, reopened, edited ] types: [ opened, synchronize, reopened, edited ]
permissions: { }
jobs: jobs:
build: build:
name: conventional pull requests name: conventional pull requests
runs-on: ubuntu-22.04 runs-on: ubuntu-22.04
permissions:
contents: read
pull-requests: read
packages: read
statuses: write
steps: steps:
- name: conventional pull requests check - name: conventional pull requests check
uses: ytanikin/PRConventionalCommits@1.1.0 uses: ytanikin/PRConventionalCommits@1.1.0

1
.github/workflows/lint.yml vendored
View File

@ -12,6 +12,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions: permissions:
contents: read contents: read
pull-requests: read
packages: read packages: read
statuses: write statuses: write
steps: steps: