Fix token permissions (#886)

Use `read-all` at the top level. Not sure if we actually need anything more somewhere, but I guess this is one way to find out. Signed-off-by: Anders Eknert <[email protected]>
StyraInc · Jul 2, 2024 · a4c96a4 · a4c96a4
1 parent 6b6ffc4
commit a4c96a4
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -11,6 +11,8 @@ on:
   pull_request:
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
   build-matrix:
     env:

diff --git a/.github/workflows/push-tags.yaml b/.github/workflows/push-tags.yaml
@@ -5,6 +5,8 @@ on:
     tags:
       - v[0-9].**
 
+permissions: read-all
+
 jobs:
   goreleaser:
     name: GoReleaser

diff --git a/.github/workflows/update-docs.yaml b/.github/workflows/update-docs.yaml
@@ -8,6 +8,8 @@ on:
     - v[0-9].**
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
   update-docs:
     name: Update Docs