Merge pull request #1 from smile-io/ALEX-144-explicitly-set-github-ac…

…tions-permissions Explicitly set permissions on Github Actions workflows.
smile-io · Aug 6, 2024 · d3a1cd4 · d3a1cd4
2 parents 6e06c63 + 3f11528
commit d3a1cd4
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/.github/workflows/reviewdog.yml b/.github/workflows/reviewdog.yml
@@ -4,6 +4,9 @@ jobs:
   hadolint:
     name: runner / hadolint
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - name: Check out code
         uses: actions/checkout@v1

diff --git a/.github/workflows/semver.yml b/.github/workflows/semver.yml
@@ -8,6 +8,8 @@ on:
 jobs:
   update-semver:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v1
       - uses: haya14busa/action-update-semver@v1