GitHub Workflows security hardening (#3094)

openai · Sep 27, 2022 · e055ee7 · e055ee7
1 parent 53d784e
commit e055ee7
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -1,6 +1,9 @@
 name: build
 on: [pull_request, push]
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
@@ -5,6 +5,8 @@ on:
   pull_request:
   push:
     branches: [master]
+permissions:
+  contents: read # to fetch code (actions/checkout)
 jobs:
   pre-commit:
     runs-on: ubuntu-latest