Skip to content

Commit a948d52

Browse files
committed
Added permissions to override repo/org settings w/ least privileges required for improved security (https://cwe.mitre.org/data/definitions/275.html)
1 parent ad120ca commit a948d52

3 files changed

Lines changed: 9 additions & 0 deletions

File tree

.github/workflows/lint-on-push-pr.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,9 @@
11
name: Lint pushes + PRs
22
on: [push, pull_request]
33

4+
permissions:
5+
contents: read
6+
47
jobs:
58

69
python-lint:

.github/workflows/sync-remove-json-keys.py-changes.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,9 @@ on:
33
branches: main
44
paths: "**/remove-json-keys.py"
55

6+
permissions:
7+
contents: write
8+
69
jobs:
710
build:
811
if: (github.repository == 'adamlui/python-utils') && (github.event.commits[0].committer.username != 'kudo-sync-bot')

.github/workflows/sync-translate-en-messages-changes.py.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,9 @@ on:
33
branches: main
44
paths: "**/translate-en-messages.py"
55

6+
permissions:
7+
contents: write
8+
69
jobs:
710
build:
811
if: (github.repository == 'adamlui/python-utils') && (github.event.commits[0].committer.username != 'kudo-sync-bot')

0 commit comments

Comments
 (0)