neilnaveen 2e2eca672a ci: set permissions for github actions ...

Restrict the GitHub token permissions only to the required ones;
this way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.

Included permissions for the action.
https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>

2022-08-04 11:07:00 -06:00

..

canary-test-config

ci: run tests against k8s 1.24

2022-06-28 15:11:55 -06:00

collect-logs

ci: use github composition to reduce duplication

2021-11-09 16:41:55 +05:30

encryption-pvc-kms-ibm-kp

ci: more specific ci config folder names

2022-06-06 20:23:34 +05:30

integration-test-config

ci: run tests against k8s 1.24

2022-06-28 15:11:55 -06:00

rgw-multisite-test

build: update to latest quincy release 17.2.1

2022-06-24 15:57:19 -06:00

.yamllint

core: change directory layout

2021-11-30 09:12:53 +01:00

auto-assign.yaml

ci: add ci bot for auto assign issue

2022-07-14 11:22:28 +05:30

build.yml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

canary-integration-test.yml

osd: support OSD on logical volume in host-based cluster

2022-07-11 21:08:50 +00:00

codegen.yml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

codespell.yaml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

commitlint.yml

Merge pull request #10343 from Madhu-1/stop-action-when-pr-updated

2022-05-31 09:16:10 -06:00

crds-gen.yml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

create-tag.yaml

ci: validate user before creating tag

2021-08-19 20:47:05 +05:30

daily-nightly-jobs.yml

core: remove support for ceph octopus

2022-07-07 15:03:26 -06:00

docs-check.yml

ci: add docs-check flow

2022-06-27 19:24:52 +02:00

golangci-lint.yaml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

helm-lint.yaml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

integration-test-helm-suite.yaml

ci: run tests against k8s 1.24

2022-06-28 15:11:55 -06:00

integration-test-mgr-suite.yaml

ci: run tests against k8s 1.24

2022-06-28 15:11:55 -06:00

integration-test-multi-cluster-suite.yaml

ci: run tests against k8s 1.24

2022-06-28 15:11:55 -06:00

integration-test-object-suite.yaml

ci: run tests against k8s 1.24

2022-06-28 15:11:55 -06:00

integration-test-smoke-suite.yaml

ci: run tests against k8s 1.24

2022-06-28 15:11:55 -06:00

integration-test-upgrade-suite.yaml

ci: run tests against k8s 1.24

2022-06-28 15:11:55 -06:00

integration-tests-on-release.yaml

ci: run tests against k8s 1.24

2022-06-28 15:11:55 -06:00

linters.yaml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

mod-check.yml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

push-build.yaml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

rbac-gen.yaml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

shellcheck.yaml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

stale.yaml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

synk.yaml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00

unit-test.yml

ci: set permissions for github actions

2022-08-04 11:07:00 -06:00