Harden GitHub Workflows security settings

Closes gh-29171 Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com>
2026-09-17 16:39:29 +00:00 · 2022-09-19 14:24:57 +02:00
parent 3e41d7f23e
commit 5277b1dbf0
1 changed files with 5 additions and 0 deletions
@@ -6,8 +6,13 @@ on:
  push:
    branches:
      - '*.x'
+permissions:
+  contents: read
 jobs:
  build:
+    permissions:
+      contents: read
+      issues: write
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3