diff options
| -rw-r--r-- | .github/workflows/integration.yaml | 3 | ||||
| -rw-r--r-- | .github/workflows/pypi-publish.yaml | 3 | ||||
| -rw-r--r-- | .github/workflows/release-drafter.yml | 5 | ||||
| -rw-r--r-- | .github/workflows/stale-issues.yml | 5 |
4 files changed, 16 insertions, 0 deletions
diff --git a/.github/workflows/integration.yaml b/.github/workflows/integration.yaml index c2b84a6..8d38cd4 100644 --- a/.github/workflows/integration.yaml +++ b/.github/workflows/integration.yaml @@ -16,6 +16,9 @@ on: schedule: - cron: '0 1 * * *' # nightly build +permissions: + contents: read # to fetch code (actions/checkout) + jobs: dependency-audit: diff --git a/.github/workflows/pypi-publish.yaml b/.github/workflows/pypi-publish.yaml index 3e7f801..50332c1 100644 --- a/.github/workflows/pypi-publish.yaml +++ b/.github/workflows/pypi-publish.yaml @@ -4,6 +4,9 @@ on: release: types: [published] +permissions: + contents: read # to fetch code (actions/checkout) + jobs: build_and_package: diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml index ec2d88b..eebb3e6 100644 --- a/.github/workflows/release-drafter.yml +++ b/.github/workflows/release-drafter.yml @@ -6,8 +6,13 @@ on: branches: - master +permissions: {} jobs: update_release_draft: + permissions: + pull-requests: write # to add label to PR (release-drafter/release-drafter) + contents: write # to create a github release (release-drafter/release-drafter) + runs-on: ubuntu-latest steps: # Drafts your next Release notes as Pull Requests are merged into "master" diff --git a/.github/workflows/stale-issues.yml b/.github/workflows/stale-issues.yml index 562cd58..32fd9e8 100644 --- a/.github/workflows/stale-issues.yml +++ b/.github/workflows/stale-issues.yml @@ -3,8 +3,13 @@ on: schedule: - cron: "0 0 * * *" +permissions: {} jobs: stale: + permissions: + issues: write # to close stale issues (actions/stale) + pull-requests: write # to close stale PRs (actions/stale) + runs-on: ubuntu-latest steps: - uses: actions/stale@v3 |