Skip to content

Commit 4acb7b9

Browse files
committed
Reduce GitHub Action permissions
See: * https://docs.zizmor.sh/audits/#excessive-permissions
1 parent f47f361 commit 4acb7b9

File tree

5 files changed

+13
-4
lines changed

5 files changed

+13
-4
lines changed

.github/workflows/release-github.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
11
name: Release GitHub
22

3+
permissions: {}
4+
35
on:
46
push:
57
branches: [release/*]

.github/workflows/release-mvn.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
11
name: Release Maven
22

3+
permissions: {}
4+
35
on:
46
push:
57
branches: [release/*]

.github/workflows/release-npm.yml

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,19 @@
11
name: Release NPM
22

3+
permissions: {}
4+
35
on:
46
push:
57
branches: [release/*]
68

7-
permissions:
8-
id-token: write
9-
contents: read
10-
119
jobs:
1210
publish-npm:
1311
name: Publish NPM module
1412
runs-on: ubuntu-latest
1513
environment: Release
14+
permissions:
15+
id-token: write
16+
contents: read
1617
steps:
1718
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1819
with:

.github/workflows/test-java.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
11
name: test-java
22

3+
permissions: {}
4+
35
on:
46
push:
57
branches:

.github/workflows/test-javascript.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
11
name: test-javascript
22

3+
permissions: {}
4+
35
on:
46
push:
57
branches:

0 commit comments

Comments
 (0)