rust/comprehensive-rust
1
0
Fork 0
mirror of https://github.com/google/comprehensive-rust.git synced 2025-12-21 06:31:06 +02:00
Code Issues Releases Activity

Reduce permissions for Github actions by reducing to minimal permissions (#2961)

Browse Source 
This is increasing the security of this repository. A standard
GITHUB_TOKEN currently has these permissions.

GITHUB_TOKEN Permissions
  Contents: read
  Metadata: read
  Packages: read

Setting only `contents: read` permission has the effect of removing
Packages permission. Metadata is added automatically.

fixes #2958
This commit is contained in:
michael-kerscher
2025-10-29 14:37:13 +01:00
committed by GitHub
parent c3f92dde07
commit a5e68972c2
3 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/build.yml vendored
View File

@@ -1,4 +1,6 @@
name: Test name: Test
permissions:
contents: read
on: on:
pull_request: pull_request:

2
.github/workflows/check-msgid-changes.yml vendored
View File

@@ -1,4 +1,6 @@
name: Prevent unintended msgid changes name: Prevent unintended msgid changes
permissions:
contents: read
on: on:
pull_request: pull_request:

2
.github/workflows/lint.yml vendored
View File

@@ -1,4 +1,6 @@
name: Lint name: Lint
permissions:
contents: read
on: on:
pull_request: pull_request: