git.ipfire.org Git - thirdparty/curl.git/commit

]> git.ipfire.org Git - thirdparty/curl.git/commit

projects / thirdparty / curl.git / commit

author	Diogo Teles Sant'Anna <diogoteles@google.com>
	Wed, 16 Nov 2022 14:55:33 +0000 (11:55 -0300)
committer	Daniel Stenberg <daniel@haxx.se>
	Fri, 2 Dec 2022 22:13:54 +0000 (23:13 +0100)
commit	a2f5a4ca6f2cd1b6d10a46e8710d85ca2bc2dba9
tree	3248d4b6eb6b2a85d28a8057c88fc5add7490f6d	tree \| snapshot
parent	8fc24233388d91193afa8d438a91a058673411c8	commit \| diff

GHA: clarify workflows permissions, set least possible privilege

Set top-level permissions to None on all workflows, setting per-job
permissions. This avoids that new jobs inherit unwanted permissions.

Discussion: https://curl.se/mail/lib-2022-11/0028.html

Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Closes #9928

14 files changed:

.github/workflows/appveyor-status.yml		diff \| blob \| blame \| history
.github/workflows/codeql-analysis.yml		diff \| blob \| blame \| history
.github/workflows/fuzz.yml		diff \| blob \| blame \| history
.github/workflows/hacktoberfest-accepted.yml		diff \| blob \| blame \| history
.github/workflows/linkcheck.yml		diff \| blob \| blame \| history
.github/workflows/linux.yml		diff \| blob \| blame \| history
.github/workflows/macos.yml		diff \| blob \| blame \| history
.github/workflows/ngtcp2-gnutls.yml		diff \| blob \| blame \| history
.github/workflows/ngtcp2-wolfssl.yml		diff \| blob \| blame \| history
.github/workflows/proselint.yml		diff \| blob \| blame \| history
.github/workflows/reuse.yml		diff \| blob \| blame \| history
.github/workflows/spellcheck.yml		diff \| blob \| blame \| history
.github/workflows/torture.yml		diff \| blob \| blame \| history
.github/workflows/wolfssl.yml		diff \| blob \| blame \| history

Mirror of https://github.com/curl/curl.git

RSS Atom