From: Alex Date: Mon, 26 Sep 2022 21:59:29 +0000 (+0200) Subject: build: harden cifuzz.yml permissions X-Git-Tag: v2.39-rc1~504^2~2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9872124bfb7e396bd48f6c8030736de512fe8653;p=thirdparty%2Futil-linux.git build: harden cifuzz.yml permissions Signed-off-by: Alex --- diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml index 93ebc3ceaa..e4945c06a2 100644 --- a/.github/workflows/cifuzz.yml +++ b/.github/workflows/cifuzz.yml @@ -12,8 +12,15 @@ on: - master paths: - '**' +permissions: + contents: read # to clone the repo (google/oss-fuzz/infra/cifuzz/actions/run_fuzzers) + jobs: Fuzzing: + permissions: + actions: read # to fetch the artifacts (google/oss-fuzz/infra/cifuzz/actions/run_fuzzers) + contents: read # to clone the repo (google/oss-fuzz/infra/cifuzz/actions/run_fuzzers) + runs-on: ubuntu-latest if: github.repository == 'util-linux/util-linux' strategy: