GitHub Actions: limit permissions of GITHUB_TOKEN

jacekkow · Apr 27, 2023 · b1c0c9d · b1c0c9d
1 parent fe16b80
commit b1c0c9d
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -5,6 +5,8 @@ on:
 
 name: Release
 
+permissions: {}
+
 jobs:
   build:
     name: Build

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -3,6 +3,8 @@ on:
 
 name: Test
 
+permissions: {}
+
 jobs:
   build:
     name: Build

diff --git a/.github/workflows/update-deps.yml b/.github/workflows/update-deps.yml
@@ -5,10 +5,14 @@ on:
 
 name: Update dependencies
 
+permissions: {}
+
 jobs:
   update:
     name: Update dependencies
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - id: checkout
         name: Checkout code