Set top level permission for GHA

IntelRealSense · Jan 8, 2024 · 33c5f47 · 33c5f47
1 parent 79b7fb3
commit 33c5f47
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -13,6 +13,8 @@ on:
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
+permissions: read-all
+
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 # This workflow contains a single job called "build"
 

diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
@@ -23,6 +23,7 @@ on:
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
+permissions: read-all
 
 jobs:
   build:

diff --git a/.github/workflows/static_analysis.yaml b/.github/workflows/static_analysis.yaml
@@ -6,6 +6,8 @@ on:
   pull_request:
     branches: ['**']
 
+permissions: read-all
+
 jobs:
   cppcheck:
     name: cppcheck
-Original file line number
+Diff line change
@@ Expand Up / @@ -23,6 +23,7 @@ on: @@
       # Allows you to run this workflow manually from the Actions tab
       workflow_dispatch:
+    permissions: read-all
     jobs:
       build:
@@ Expand Down @@