Enforce stricter permissions on GitHub actions

2024-05-06 11:18:48 +02:00
parent 9fabc69ba9
commit 3473611b90
2 changed files with 23 additions and 4 deletions
@@ -25,8 +25,7 @@ jobs:
    if: ${{ github.event.workflow_run.conclusion == 'success' }}

    permissions:
-      actions: read
-      contents: read
+      # Only allow write for security, then all others default to read only
      security-events: write

    strategy: