Skip to content

Commit c3e85c7

Browse files
Merge pull request #322 from GetStream/ci/workflow-least-privilege-permissions
CI: add least-privilege permissions to GitHub Actions workflows
2 parents 5d388e5 + 0c3cefc commit c3e85c7

4 files changed

Lines changed: 15 additions & 1 deletion

File tree

‎.github/workflows/android.yml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,11 @@ on:
66
pull_request:
77
branches: [ main ]
88

9+
permissions:
10+
actions: write
11+
contents: read
12+
pull-requests: read
13+
914
jobs:
1015
build:
1116
runs-on: ubuntu-latest

‎.github/workflows/publish-snapshot.yml‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,10 @@ on:
55
branches:
66
- main
77
workflow_dispatch:
8-
8+
9+
permissions:
10+
contents: read
11+
912
jobs:
1013
publish:
1114
name: Snapshot build and publish

‎.github/workflows/publish.yml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,9 @@ on:
55
types: [released]
66
workflow_dispatch:
77

8+
permissions:
9+
contents: read
10+
811
jobs:
912
publish:
1013
name: Release build and publish

‎.github/workflows/release-docs.yaml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,9 @@ on:
66
- main
77
workflow_dispatch:
88

9+
permissions:
10+
contents: read
11+
912
jobs:
1013
publish_dokka:
1114
name: Dokka docs

0 commit comments

Comments
 (0)