From 2882725927553e5a5882e3d054aae44f36833674 Mon Sep 17 00:00:00 2001 From: Alex Date: Mon, 19 Sep 2022 21:01:06 +0200 Subject: [PATCH 1/2] build: harden lint_python.yml permissions Signed-off-by: Alex --- .github/workflows/lint_python.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/lint_python.yml b/.github/workflows/lint_python.yml index cbc27489db..b21191934c 100644 --- a/.github/workflows/lint_python.yml +++ b/.github/workflows/lint_python.yml @@ -1,5 +1,7 @@ name: lint_python on: workflow_dispatch +permissions: + contents: read # to fetch code (actions/checkout) jobs: lint_python: runs-on: ubuntu-latest From 7d96ef2671e5067da306049486bb7daa4d581662 Mon Sep 17 00:00:00 2001 From: Alex Date: Mon, 19 Sep 2022 21:01:34 +0200 Subject: [PATCH 2/2] build: harden arm64-build-checks.yml permissions Signed-off-by: Alex --- .github/workflows/arm64-build-checks.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/arm64-build-checks.yml b/.github/workflows/arm64-build-checks.yml index d3cf532d59..e0d374ea77 100644 --- a/.github/workflows/arm64-build-checks.yml +++ b/.github/workflows/arm64-build-checks.yml @@ -2,6 +2,9 @@ name: arm64 build checks on: workflow_dispatch +permissions: + contents: read # to fetch code (actions/checkout) + jobs: build: