ci: reduce Github Action permissions

lindell · Nov 1, 2023 · 4af7152 · 4af7152
1 parent 3b3e9c0
commit 4af7152
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
@@ -1,5 +1,7 @@
 name: Testing Coverage
 on: [push, pull_request]
+permissions:
+  contents: read
 jobs:
   build:
     name: Test and Coverage

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -3,10 +3,16 @@ on:
     branches:
       - master
 
+permissions:
+  contents: read
+
 name: release
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # needed for release-please
+      pull-requests: write # needed for release-please and github-release-commenter
     steps:
       - uses: GoogleCloudPlatform/[email protected]
         id: release