aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThéophane Hufschmitt <theophane.hufschmitt@tweag.io>2022-07-05 12:06:58 +0200
committerThéophane Hufschmitt <theophane.hufschmitt@tweag.io>2022-07-05 16:01:20 +0200
commit70083218b3727bd1279026cbe4d4179d0c7182c0 (patch)
tree30a24ff11fb5bb03d26a8f8ad1489c4887777a0c
parent057b02fd25b9aec4c66005de302fcc22b74bb088 (diff)
Restrict the permissions of the CI
-rw-r--r--.github/workflows/ci.yml2
-rw-r--r--.github/workflows/hydra_status.yml3
2 files changed, 5 insertions, 0 deletions
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1a317f267..956f81684 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -4,6 +4,8 @@ on:
pull_request:
push:
+permissions: read-all
+
jobs:
tests:
diff --git a/.github/workflows/hydra_status.yml b/.github/workflows/hydra_status.yml
index d85999256..7766e4f8e 100644
--- a/.github/workflows/hydra_status.yml
+++ b/.github/workflows/hydra_status.yml
@@ -1,4 +1,7 @@
name: Hydra status
+
+permissions: read-all
+
on:
schedule:
- cron: "12,42 * * * *"