From 72eec23113a01110be0fdd2f1cf43a4ed0586c0e Mon Sep 17 00:00:00 2001 From: erezrokah Date: Mon, 29 Sep 2025 17:17:22 +0100 Subject: [PATCH] chore: Add permissions to all workflows --- .github/workflows/gen-client.yml | 3 +++ .github/workflows/lint_golang.yml | 3 +++ .github/workflows/release-pr.yml | 4 +++- .github/workflows/unittest.yml | 3 +++ 4 files changed, 12 insertions(+), 1 deletion(-) diff --git a/.github/workflows/gen-client.yml b/.github/workflows/gen-client.yml index 582343e..45a216b 100644 --- a/.github/workflows/gen-client.yml +++ b/.github/workflows/gen-client.yml @@ -2,6 +2,9 @@ name: Generate API Client on: workflow_dispatch: +permissions: + contents: read + jobs: gen-api: timeout-minutes: 30 diff --git a/.github/workflows/lint_golang.yml b/.github/workflows/lint_golang.yml index e624a24..b99efbe 100644 --- a/.github/workflows/lint_golang.yml +++ b/.github/workflows/lint_golang.yml @@ -7,6 +7,9 @@ on: branches: - main +permissions: + contents: read + jobs: golangci: name: Lint with GolangCI diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml index db3a020..ac37325 100644 --- a/.github/workflows/release-pr.yml +++ b/.github/workflows/release-pr.yml @@ -3,7 +3,9 @@ on: push: branches: - main - workflow_dispatch: + +permissions: + contents: read jobs: release-please: diff --git a/.github/workflows/unittest.yml b/.github/workflows/unittest.yml index 29ba9ee..512b74f 100644 --- a/.github/workflows/unittest.yml +++ b/.github/workflows/unittest.yml @@ -7,6 +7,9 @@ on: branches: - main +permissions: + contents: read + jobs: unitests: timeout-minutes: 30