ci:harden permissions for all github workflows

Signed-off-by: Carl Zhang <[email protected]>
intel · Feb 8, 2024 · efc6f8f · efc6f8f
1 parent a438699
commit efc6f8f
Show file tree

Hide file tree

Showing 5 changed files with 15 additions and 0 deletions.
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
@@ -1,5 +1,8 @@
 name: docs
 
+permissions:
+  contents: read
+
 on:
   push:
     paths-ignore:

diff --git a/.github/workflows/freebsd.yml b/.github/workflows/freebsd.yml
@@ -1,5 +1,8 @@
 name: freebsd
 
+permissions:
+  contents: read
+
 on: [push, pull_request]
 
 jobs:

diff --git a/.github/workflows/style.yml b/.github/workflows/style.yml
@@ -1,5 +1,8 @@
 name: style
 
+permissions:
+  contents: read
+
 on: [push, pull_request]
 
 jobs:

diff --git a/.github/workflows/ubuntu.yml b/.github/workflows/ubuntu.yml
@@ -1,5 +1,8 @@
 name: ubuntu
 
+permissions:
+  contents: read
+
 on: [push, pull_request]
 
 env:

diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
@@ -1,5 +1,8 @@
 name: windows
 
+permissions:
+  contents: read
+
 on: [push, pull_request]
 
 jobs: