Skip to content

Commit df981e9

Browse files
authored
fix: Update permissions in workflows to use specific access levels (#10)
Adjust permissions in workflows to specify access levels, enhancing security and functionality for release and label synchronization processes.
1 parent 821470b commit df981e9

4 files changed

Lines changed: 5 additions & 2 deletions

File tree

.github/workflows/defender-for-devops.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
MSDO:
3333
# currently only windows latest is supported
3434
runs-on: windows-latest
35-
35+
permissions: write-all
3636
steps:
3737
- uses: actions/checkout@v4.2.2
3838
- uses: actions/setup-dotnet@v4.3.1

.github/workflows/release-drafter.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@ jobs:
1616
update_release_draft:
1717
name: Update release draft
1818
runs-on: ubuntu-latest
19+
permissions: write-all
1920
steps:
2021
- name: Checkout
2122
uses: actions/checkout@v4

.github/workflows/release.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,9 +11,10 @@ env:
1111
COMPONENT_DIR: hsem
1212

1313
jobs:
14-
release_zip_file:
14+
release_file:
1515
name: Prepare release asset
1616
runs-on: ubuntu-latest
17+
permissions: write-all
1718
steps:
1819
- name: Checkout repository
1920
uses: actions/checkout@v4

.github/workflows/sync-labels.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,7 @@ jobs:
1515
labels:
1616
name: ♻️ Sync labels
1717
runs-on: ubuntu-latest
18+
permissions: write-all
1819
steps:
1920
- name: ⤵️ Check out code from GitHub
2021
uses: actions/checkout@v4.2.2

0 commit comments

Comments
 (0)