Merge pull request #197 from minijackson/actions-security

GitHub actions security
epics-extensions · Nov 7, 2024 · 5317be2 · 5317be2
2 parents 3aab2bc + 8f27b85
commit 5317be2
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 8 deletions.
diff --git a/.github/workflows/book-gh-pages.yml b/.github/workflows/book-gh-pages.yml
@@ -8,8 +8,6 @@ on:
 
 permissions:
   contents: read
-  pages: write
-  id-token: write
 
 # Only one concurrent deployment
 concurrency:
@@ -19,6 +17,9 @@ concurrency:
 jobs:
   deploy:
     if: "github.repository_owner == 'epics-extensions'"
+    permissions:
+      pages: write
+      id-token: write
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}

diff --git a/.github/workflows/editorconfig.yml b/.github/workflows/editorconfig.yml
@@ -1,10 +1,10 @@
 name: "Check EditorConfig"
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
-  pull_request_target:
-    types: [opened, synchronize, reopened, edited]
+  pull_request:
 
 jobs:
   editorconfig:

diff --git a/.github/workflows/formatting.yml b/.github/workflows/formatting.yml
@@ -1,10 +1,10 @@
 name: "Check Formatting"
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
-  pull_request_target:
-    types: [opened, synchronize, reopened, edited]
+  pull_request:
 
 jobs:
   alejandra: