Adding correct token scopes (#70)

devops-actions · Feb 13, 2025 · 130b52a · 130b52a
1 parent 3ffa891
commit 130b52a
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.github/workflows/test-local-action.yml b/.github/workflows/test-local-action.yml
@@ -3,11 +3,19 @@ on:
   push:
 
   pull_request:
+
+permissions:
+  none
 
 jobs:
   test-local-action:
     name: Test with normal setup
     runs-on: ubuntu-latest
+    permissions:
+      # needed for the checkout action
+      contents: read
+      # needed to annotate the files in a pull request with comments
+      pull-requests: write
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
@@ -49,6 +57,11 @@ jobs:
     name: Test with skip failure set on the action
     runs-on: ubuntu-latest
     needs: test-local-action
+    permissions:
+      # needed for the checkout action
+      contents: read
+      # needed to annotate the files in a pull request with comments
+      pull-requests: write
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4