From d65483d02d4fb0b2c9b34f2987082c14eb789fbf Mon Sep 17 00:00:00 2001
From: Shunsuke Suzuki <suzuki.shunsuke.1989@gmail.com>
Date: Wed, 5 Apr 2023 21:08:24 +0900
Subject: [PATCH] ci: fix permissions

---
 .github/workflows/test.yaml                | 1 +
 .github/workflows/wc-integration-test.yaml | 1 +
 ghalint.yaml                               | 2 +-
 3 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index be0c42325..e95b9ff2d 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -31,6 +31,7 @@ jobs:
               - .github/workflows/*.yaml
               - aqua/aqua.yaml
               - aqua/imports/ghalint.yaml
+              - ghalint.yaml
             go-mod-tidy:
               - go.mod
               - go.sum
diff --git a/.github/workflows/wc-integration-test.yaml b/.github/workflows/wc-integration-test.yaml
index 0ba2aaa98..f7edb2e5a 100644
--- a/.github/workflows/wc-integration-test.yaml
+++ b/.github/workflows/wc-integration-test.yaml
@@ -4,6 +4,7 @@ on: workflow_call
 jobs:
   integration-test:
     runs-on: ubuntu-latest
+    permissions: {}
     env:
       GITHUB_TOKEN: ${{github.token}}
       AQUA_LOG_LEVEL: debug
diff --git a/ghalint.yaml b/ghalint.yaml
index 04e50c8f3..2acddcfd6 100644
--- a/ghalint.yaml
+++ b/ghalint.yaml
@@ -2,7 +2,7 @@
 # https://github.com/suzuki-shunsuke/ghalint
 excludes:
   - policy_name: job_secrets
-    workflow_file_path: .github/workflows/test.yaml
+    workflow_file_path: .github/workflows/wc-integration-test.yaml
     job_name: integration-test
   - policy_name: job_secrets
     workflow_file_path: .github/workflows/windows-test.yaml