Set permissions to write packages.

logicality-io · Nov 3, 2024 · 6313fd4 · 6313fd4
1 parent 6038743
commit 6313fd4
Show file tree

Hide file tree

Showing 11 changed files with 22 additions and 2 deletions.
diff --git a/.github/WorkflowGen/Program.cs b/.github/WorkflowGen/Program.cs
@@ -40,6 +40,8 @@ void GenerateWorkflowsForLibs()
             .Paths(paths)
             .Tags($"{lib}-**");
 
+        workflow.Permissions(packages: Permission.Write);
+
         var buildJob = workflow
             .Job("build")
             .RunsOn(GitHubHostedRunners.UbuntuLatest)

diff --git a/.github/workflows/aspnet-core-ci.yml b/.github/workflows/aspnet-core-ci.yml
@@ -16,6 +16,8 @@ on:
     - build/**
     tags:
     - aspnet-core-**
+permissions:
+  packages: write
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/bullseye-ci.yml b/.github/workflows/bullseye-ci.yml
@@ -16,6 +16,8 @@ on:
     - build/**
     tags:
     - bullseye-**
+permissions:
+  packages: write
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -34,10 +34,10 @@ jobs:
         dotnet-version: 8.0.x
     - run: dotnet --info
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v2
       with:
         languages: ${{ matrix.language }}
     - run: ./build.ps1 build
       shell: pwsh
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v2
diff --git a/.github/workflows/configuration-ci.yml b/.github/workflows/configuration-ci.yml
@@ -16,6 +16,8 @@ on:
     - build/**
     tags:
     - configuration-**
+permissions:
+  packages: write
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/github-ci.yml b/.github/workflows/github-ci.yml
@@ -16,6 +16,8 @@ on:
     - build/**
     tags:
     - github-**
+permissions:
+  packages: write
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/hosting-ci.yml b/.github/workflows/hosting-ci.yml
@@ -16,6 +16,8 @@ on:
     - build/**
     tags:
     - hosting-**
+permissions:
+  packages: write
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/lambda-ci.yml b/.github/workflows/lambda-ci.yml
@@ -16,6 +16,8 @@ on:
     - build/**
     tags:
     - lambda-**
+permissions:
+  packages: write
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/pulumi-ci.yml b/.github/workflows/pulumi-ci.yml
@@ -16,6 +16,8 @@ on:
     - build/**
     tags:
     - pulumi-**
+permissions:
+  packages: write
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/system-extensions-ci.yml b/.github/workflows/system-extensions-ci.yml
@@ -16,6 +16,8 @@ on:
     - build/**
     tags:
     - system-extensions-**
+permissions:
+  packages: write
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/webhook-relay-ci.yml b/.github/workflows/webhook-relay-ci.yml
@@ -16,6 +16,8 @@ on:
     - build/**
     tags:
     - webhook-relay-**
+permissions:
+  packages: write
 jobs:
   build:
     runs-on: ubuntu-latest