Skip to content

Commit 55453b3

Browse files
Update workflow permissions for CI and link checker jobs
Added explicit permissions for contents, pull-requests, and issues to improve GitHub Actions security and functionality. These changes ensure the workflows have scoped access to required resources while adhering to the principle of least privilege.
1 parent 9ee30a2 commit 55453b3

2 files changed

Lines changed: 11 additions & 0 deletions

File tree

.github/workflows/ci.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,9 @@ jobs:
1414
env:
1515
AZURE_STATIC_WEB_APPS_API_TOKEN_HAPPY_OCEAN_048B8E60F: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_HAPPY_OCEAN_048B8E60F }}
1616
runs-on: ubuntu-latest
17+
permissions:
18+
contents: read
19+
pull-requests: write
1720
name: Build and Deploy Job
1821
steps:
1922
- uses: actions/checkout@v2
@@ -46,6 +49,10 @@ jobs:
4649
env:
4750
AZURE_STATIC_WEB_APPS_API_TOKEN_HAPPY_OCEAN_048B8E60F: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_HAPPY_OCEAN_048B8E60F }}
4851
runs-on: ubuntu-latest
52+
permissions:
53+
contents: read
54+
pull-requests: write
55+
issues: write
4956
name: Close Pull Request Job
5057
steps:
5158
- name: Close Pull Request

.github/workflows/link-checker.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,10 @@ on:
1515
jobs:
1616
link_checker_job:
1717
runs-on: ubuntu-latest
18+
permissions:
19+
contents: read
20+
pull-requests: write
21+
issues: write
1822
name: Link Checker Job
1923
steps:
2024
- uses: actions/checkout@v2

0 commit comments

Comments
 (0)