permissions

rlespinasse · Oct 12, 2024 · dbcb20a · dbcb20a
1 parent 8e987cc
commit dbcb20a
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/.github/workflows/linter.yaml b/.github/workflows/linter.yaml
@@ -3,6 +3,8 @@ name: Lint Code Base
 
 on: pull_request
 
+permissions: read-all
+
 jobs:
   build:
     name: Lint Code Base
@@ -24,4 +26,4 @@ jobs:
         env:
           VALIDATE_ALL_CODEBASE: false
           DEFAULT_BRANCH: v1.x
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
diff --git a/.github/workflows/release-that.yaml b/.github/workflows/release-that.yaml
@@ -1,5 +1,6 @@
 name: Release that
 on: [push, pull_request]
+permissions: read-all
 jobs:
   os-testing:
     strategy:
@@ -51,6 +52,11 @@ jobs:
   release:
     runs-on: ubuntu-latest
     needs: os-testing
+    permissions:
+      contents: write
+      issues: write
+      id-token: write
+      packages: write
     concurrency:
       group: release-${{ github.ref }}
     steps: