Skip to content

Commit 14397ff

Browse files
committed
update permissions on github actions
1 parent 5facc2d commit 14397ff

2 files changed

Lines changed: 9 additions & 0 deletions

File tree

.github/workflows/stale_tag.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,9 @@ on:
77
jobs:
88
stale:
99
runs-on: ubuntu-latest
10+
permissions:
11+
contents: read
12+
pull-requests: write
1013
steps:
1114
- uses: actions/stale@v8.0.0
1215
with:

.github/workflows/tag_release.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,8 @@ jobs:
99
checks:
1010
name: Requirements
1111
runs-on: ubuntu-latest
12+
permissions:
13+
contents: read
1214
steps:
1315
- name: Check user permissions
1416
uses: 74th/workflow-permission-action@1.0.0
@@ -20,6 +22,8 @@ jobs:
2022
needs: checks
2123
outputs:
2224
upload_url: ${{ steps.create_release.outputs.upload_url }}
25+
permissions:
26+
contents: write
2327
steps:
2428
- name: Checkout tag "${{ github.ref_name }}"
2529
uses: actions/checkout@v3
@@ -55,6 +59,8 @@ jobs:
5559
name: Upload Java Plugin
5660
runs-on: ubuntu-latest
5761
needs: build
62+
permissions:
63+
contents: write
5864
steps:
5965
- name: Import plugin JAR files
6066
id: import_jar_files

0 commit comments

Comments
 (0)