Fix warning[excessive-permissions]: overly broad permissions

https://woodruffw.github.io/zizmor/audits/#excessive-permissions
hugovk · Jan 20, 2025 · 110e0b7 · 110e0b7
1 parent 6bb70de
commit 110e0b7
Show file tree

Hide file tree

Showing 4 changed files with 11 additions and 4 deletions.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -11,6 +11,8 @@ on:
       - published
   workflow_dispatch:
 
+permissions: {}
+
 env:
   FORCE_COLOR: 1
 

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -4,6 +4,9 @@ on: [push, pull_request, workflow_dispatch]
 
 env:
   FORCE_COLOR: 1
+  RUFF_OUTPUT_FORMAT: github
+
+permissions: {}
 
 jobs:
   lint:

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -2,6 +2,8 @@ name: Test
 
 on: [push, pull_request, workflow_dispatch]
 
+permissions: {}
+
 env:
   FORCE_COLOR: 1
 

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -1,6 +1,6 @@
 repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.8.6
+    rev: v0.9.2
     hooks:
       - id: ruff
         args: [--exit-non-zero-on-fix]
@@ -27,18 +27,18 @@ repos:
       - id: trailing-whitespace
 
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.30.0
+    rev: 0.31.0
     hooks:
       - id: check-github-workflows
       - id: check-renovate
 
   - repo: https://github.com/rhysd/actionlint
-    rev: v1.7.6
+    rev: v1.7.7
     hooks:
       - id: actionlint
 
   - repo: https://github.com/woodruffw/zizmor-pre-commit
-    rev: v1.0.0
+    rev: v1.2.2
     hooks:
       - id: zizmor
-Original file line number
+Diff line change
@@ Expand Up / @@ -4,6 +4,9 @@ on: [push, pull_request, workflow_dispatch] @@
     env:
       FORCE_COLOR: 1
+      RUFF_OUTPUT_FORMAT: github
+    permissions: {}
     jobs:
       lint:
@@ Expand Down @@