From 0d71a7959b02e665d9ad21afada2e87afbd845cc Mon Sep 17 00:00:00 2001 From: Joyce Date: Thu, 14 Sep 2023 17:39:31 -0300 Subject: [PATCH 1/2] Update ci.yml Signed-off-by: Joyce --- .github/workflows/ci.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 97fcfe7545..32c78813eb 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -19,6 +19,9 @@ on: pull_request: {} workflow_call: {} +permissions: + contents: read + env: # Keep this Bazel version in sync with the `versions.check` directive # in our WORKSPACE file. From 98785859c3896e9c178026965bf73d1587b26e52 Mon Sep 17 00:00:00 2001 From: Joyce Date: Thu, 14 Sep 2023 17:39:58 -0300 Subject: [PATCH 2/2] Update nightly-release.yml Signed-off-by: Joyce --- .github/workflows/nightly-release.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/nightly-release.yml b/.github/workflows/nightly-release.yml index ef57db220f..88285986a0 100644 --- a/.github/workflows/nightly-release.yml +++ b/.github/workflows/nightly-release.yml @@ -7,6 +7,9 @@ on: # (cron syntax: minute hour day-of-month month day-of-week) - cron: '0 11 * * *' +permissions: + contents: read + jobs: ci: uses: ./.github/workflows/ci.yml