GitHub Workflows security hardening (#6472)

* build: harden action_tools.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

* build: harden action.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

* build: harden action_utest.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
Alex 2022-09-29 08:44:28 +03:00 committed by GitHub
parent 64a6297840
commit e0294dab50
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 9 additions and 0 deletions

View File

@ -21,6 +21,9 @@ on:
- '**/README.md'
- '**/README_zh.md'
permissions:
contents: read # to fetch code (actions/checkout)
jobs:
build:
runs-on: ubuntu-latest

View File

@ -27,6 +27,9 @@ on:
- '**/*.h'
- '**/*.cpp'
permissions:
contents: read # to fetch code (actions/checkout)
jobs:
test:
runs-on: ubuntu-latest

View File

@ -21,6 +21,9 @@ on:
- '**/README.md'
- '**/README_zh.md'
permissions:
contents: read # to fetch code (actions/checkout)
jobs:
test:
runs-on: ubuntu-latest