Restrict CI to only have read access to the repo

TeamSpen210 · Jun 10, 2023 · 962077c · 962077c
1 parent 0413539
commit 962077c
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/build-fgds.yml b/.github/workflows/build-fgds.yml
@@ -10,6 +10,11 @@ on:
       - 'fgd/**'
   workflow_dispatch:
     # Allow triggering manually whenever it's useful.
+
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   build-fgds:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/build-postcompiler.yml b/.github/workflows/build-postcompiler.yml
@@ -7,6 +7,10 @@ on:
   workflow_dispatch:
     # Allow triggering manually whenever it's useful.
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   freeze:
     strategy: