This change locks down the permissions of the access token in GitHub Actions to
only allow reading the repository contents and nothing else.
see https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token
schedule:
- cron: "0 0 * * 2"
+permissions:
+ contents: read
+
jobs:
codespell:
schedule:
- cron: "0 0 * * 3"
+permissions:
+ contents: read
+
jobs:
h2spec:
name: h2spec
on:
push:
+permissions:
+ contents: read
+
jobs:
build:
schedule:
- cron: "0 0 * * *"
+permissions:
+ contents: read
+
jobs:
scan:
runs-on: ubuntu-latest
on: [push]
+permissions:
+ contents: read
+
jobs:
musl:
name: gcc
schedule:
- cron: "0 0 * * 4"
+permissions:
+ contents: read
+
jobs:
test:
on:
push:
+permissions:
+ contents: read
+
jobs:
# The generate-matrix job generates the build matrix using JSON output
# generated by .github/matrix.py.
on:
push:
+permissions:
+ contents: read
+
jobs:
msys2:
name: ${{ matrix.name }}
projects / thirdparty / haproxy.git / commitdiff
