Improve

Author: yoanm

.github/workflows/CI.yml

@@ -21,6 +21,9 @@ on: # Build any PRs and main branch changes
   schedule:
     - cron: '0 0 1 * *' # Every month
 
+permissions:
+  contents: read
+
 concurrency:
   group: "${{ github.workflow }}-${{ github.head_ref || github.ref }}"
   cancel-in-progress: true

.github/workflows/auto-merge-dependabot.yml

@@ -8,6 +8,9 @@ permissions:
 jobs:
   dependabot:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
     if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'yoanm/symfony-jsonrpc-http-server'
     steps:
       - name: Dependabot metadata

.github/workflows/coverage-upload.yml

@@ -4,6 +4,10 @@ on:
     workflows: ["CI"]
     types: [completed]
 
+permissions:
+  contents: read
+  checks: write # For the check run creation !
+
 jobs:
   upload:
     name: Upload

.github/workflows/nightly-tests.yml

@@ -4,9 +4,13 @@ on:
     workflows: ["CI"]
     types: [completed]
 
+permissions:
+  contents: read
+  checks: write # For the check run creation !
+
 jobs:
-  nightly:
-    name: Nightly
+  tests:
+    name: Tests
     permissions:
       contents: read
       checks: write # For the check run creation !

.github/workflows/pre-check-CI-updates.yml

@@ -19,6 +19,11 @@ on:
       - '.github/workflows/reusable-nightly-tests-workflow.yml'
       - '.github/workflows/auto-merge-dependabot.yml'
 
+
+permissions:
+  contents: read
+  checks: write # For the check run creation !
+
 concurrency:
   group: "${{ github.workflow }}-${{ github.head_ref || github.ref }}"
   cancel-in-progress: true

.github/workflows/reusable-nightly-tests-workflow.yml

@@ -36,6 +36,7 @@ jobs:
       - name: 'Check run ○'
         uses: yoanm/temp-reports-group-workspace/utils/attach-check-run-to-triggering-workflow@v0
         with:
+          name: 'Nightly / Fetch supported versions'
           fails-on-triggering-workflow-failure: true
 
       - name: Fetch PHP supported versions
@@ -96,6 +97,7 @@ jobs:
       - name: 'Check run ○'
         uses: yoanm/temp-reports-group-workspace/utils/attach-check-run-to-triggering-workflow@v0
         with:
+          name: 'Nightly / ${{ matrix.job-name }}'
           fails-on-triggering-workflow-failure: true
 
       - name: Check out code