Skip to content

Commit 4f5f756

Browse files
Potential fix for code scanning alert no. 145: Workflow does not contain permissions
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
1 parent a8e26bf commit 4f5f756

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

.github/workflows/ci_release.yml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,8 @@ jobs:
2626
determine-image-tag:
2727
name: Determine Image Tag
2828
runs-on: ubuntu-latest
29+
permissions:
30+
contents: read
2931
outputs:
3032
tag: ${{ steps.set-tag.outputs.tag }}
3133
steps:
@@ -39,6 +41,8 @@ jobs:
3941
fi
4042
4143
lint:
44+
permissions:
45+
contents: read
4246
uses: ./.github/workflows/lint.yml
4347

4448
docker:
@@ -52,6 +56,8 @@ jobs:
5256

5357
test:
5458
needs: determine-image-tag
59+
permissions:
60+
contents: read
5561
uses: ./.github/workflows/test.yml
5662
secrets: inherit
5763
with:
@@ -67,11 +73,15 @@ jobs:
6773
image-tag: ${{ needs.determine-image-tag.outputs.tag }}
6874

6975
proto:
76+
permissions:
77+
contents: read
7078
uses: ./.github/workflows/proto.yml
7179

7280
# branch_name trims ref/heads/ from github.ref to access a clean branch name
7381
branch_name:
7482
runs-on: ubuntu-latest
83+
permissions:
84+
contents: read
7585
outputs:
7686
branch: ${{ steps.trim_ref.outputs.branch }}
7787
steps:

0 commit comments

Comments
 (0)