Merge pull request #964 from step-security-bot/stepsecurity_remediati…

…on_1703875364 ci: harden github actions
Permify · Dec 29, 2023 · 3131ff0 · 3131ff0
2 parents 33bf308 + 32edae4
commit 3131ff0
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -20,6 +20,9 @@ on:
   schedule:
     - cron: '30 18 * * 2'
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
     name: Analyze

diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
@@ -1,5 +1,8 @@
 name: Quality
 on: [push, pull_request]
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Test with Coverage

diff --git a/.github/workflows/validate-pr-title.yml b/.github/workflows/validate-pr-title.yml
@@ -6,6 +6,9 @@ on:
       - opened
       - edited
       - synchronize
+permissions:
+  contents: read
+
 jobs:
   validate:
     name: Validate PR title