set workflows permissions to read-only (#7239)

This commit is contained in:
Derek Bailey
2022-04-11 20:01:00 -07:00
committed by GitHub
parent 7b5fd2bd05
commit 67b33b2942
5 changed files with 7 additions and 0 deletions

View File

@@ -1,4 +1,5 @@
name: CI name: CI
permissions: read-all
on: on:
push: push:

View File

@@ -10,6 +10,7 @@
# supported CodeQL languages. # supported CodeQL languages.
# #
name: "CodeQL" name: "CodeQL"
permissions: read-all
on: on:
push: push:

View File

@@ -6,6 +6,8 @@
# https://github.com/actions/labeler # https://github.com/actions/labeler
name: Labeler name: Labeler
permissions: read-all
on: [pull_request_target] on: [pull_request_target]
jobs: jobs:

View File

@@ -1,4 +1,6 @@
name: OSS-Fuzz name: OSS-Fuzz
permissions: read-all
on: on:
pull_request: pull_request:
branches: branches:

View File

@@ -1,4 +1,5 @@
name: Mark stale issues and pull requests name: Mark stale issues and pull requests
permissions: read-all
on: on:
schedule: schedule: