minor: GitHub Workflows security hardening (#6644)

PHP-CS-Fixer · Oct 11, 2022 · c626578 · c626578
1 parent a1c7c30
commit c626578
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -4,6 +4,9 @@ on:
   - pull_request
   - push
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   tests:
     strategy:

diff --git a/.github/workflows/sca.yml b/.github/workflows/sca.yml
@@ -4,6 +4,9 @@ on:
   - pull_request
   - push
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   tests:
     strategy:

diff --git a/.github/workflows/yaml.yml b/.github/workflows/yaml.yml
@@ -8,6 +8,9 @@ on:
     paths:
       - '**.y?ml'
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   validate-yaml:
     name: Validate YAML