ci(*): Fix permissions

crowdsecurity · Jul 18, 2024 · c87a1fe · c87a1fe
1 parent 2d871e1
commit c87a1fe
Show file tree

Hide file tree

Showing 4 changed files with 21 additions and 0 deletions.
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
@@ -11,6 +11,10 @@ on:
       - '**.md'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
+
 jobs:
   linter:
 

diff --git a/.github/workflows/mongodb-storage.yml b/.github/workflows/mongodb-storage.yml
@@ -13,6 +13,13 @@ on:
   schedule:
     - cron: '30 02 * * THU'
 
+permissions:
+  contents: read
+
+env:
+  # Allow ddev get to use a GitHub token to prevent rate limiting by tests
+  DDEV_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
 jobs:
   mongodb-tests:
 

diff --git a/.github/workflows/sql-storage.yml b/.github/workflows/sql-storage.yml
@@ -13,6 +13,13 @@ on:
   schedule:
     - cron: '35 02 * * THU'
 
+permissions:
+  contents: read
+
+env:
+  # Allow ddev get to use a GitHub token to prevent rate limiting by tests
+  DDEV_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
 jobs:
   sql-tests:
 

diff --git a/.github/workflows/unittests.yml b/.github/workflows/unittests.yml
@@ -13,6 +13,9 @@ on:
     - cron: '25 02 * * THU'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   unittests:
-Original file line number
+Diff line change
@@ Expand Up / @@ -11,6 +11,10 @@ on: @@
           - '**.md'
       workflow_dispatch:
+    permissions:
+      contents: read
     jobs:
       linter:
@@ Expand Down @@