CI: set least-privileged GITHUB_TOKEN (permissions: contents: read)
This commit is contained in:
4
.github/workflows/ci.yml
vendored
4
.github/workflows/ci.yml
vendored
@@ -6,6 +6,9 @@ name: CI
|
|||||||
pull_request:
|
pull_request:
|
||||||
workflow_dispatch:
|
workflow_dispatch:
|
||||||
|
|
||||||
|
permissions:
|
||||||
|
contents: read
|
||||||
|
|
||||||
concurrency:
|
concurrency:
|
||||||
group: ci-${{ github.ref }}
|
group: ci-${{ github.ref }}
|
||||||
cancel-in-progress: true
|
cancel-in-progress: true
|
||||||
@@ -87,4 +90,3 @@ jobs:
|
|||||||
else
|
else
|
||||||
echo "No YAML files."
|
echo "No YAML files."
|
||||||
fi
|
fi
|
||||||
|
|
||||||
1
.github/workflows/sync-changelog.yml
vendored
1
.github/workflows/sync-changelog.yml
vendored
@@ -42,4 +42,3 @@ jobs:
|
|||||||
git commit -m "chore: sync CHANGELOG.md from FileRise"
|
git commit -m "chore: sync CHANGELOG.md from FileRise"
|
||||||
git push origin main
|
git push origin main
|
||||||
fi
|
fi
|
||||||
|
|
||||||
@@ -41,4 +41,3 @@ services:
|
|||||||
timeout: 5s
|
timeout: 5s
|
||||||
retries: 3
|
retries: 3
|
||||||
start_period: 20s
|
start_period: 20s
|
||||||
|
|
||||||
Reference in New Issue
Block a user