fix(workflows): revert permissions to read-all

This commit is contained in:
Ismo Vuorinen
2024-09-02 15:04:09 +03:00
parent 8fb517d2a2
commit 8c1beb34b9
12 changed files with 12 additions and 25 deletions

View File

@@ -8,7 +8,7 @@ on:
- "composer.json" - "composer.json"
- "composer.lock" - "composer.lock"
permissions: {} permissions: read-all
jobs: jobs:
ComposerInstall: ComposerInstall:

View File

@@ -8,7 +8,7 @@ on:
schedule: schedule:
- cron: "00 23 * * 0" - cron: "00 23 * * 0"
permissions: {} permissions: read-all
jobs: jobs:
CompressOnDemandOrSchedule: CompressOnDemandOrSchedule:

View File

@@ -12,7 +12,7 @@ name: "Dependency Review"
on: [pull_request] on: [pull_request]
permissions: {} permissions: read-all
jobs: jobs:
dependency-review: dependency-review:

View File

@@ -7,7 +7,7 @@ on:
pull_request: pull_request:
branches: [main] branches: [main]
permissions: {} permissions: read-all
jobs: jobs:
laravel-tests: laravel-tests:

View File

@@ -11,7 +11,7 @@ on:
- "**.png" - "**.png"
- "**.webp" - "**.webp"
permissions: {} permissions: read-all
jobs: jobs:
CompressInPR: CompressInPR:

View File

@@ -24,7 +24,7 @@ on:
pull_request: pull_request:
branches: [master, main] branches: [master, main]
permissions: {} permissions: read-all
############### ###############
# Set the Job # # Set the Job #

View File

@@ -4,7 +4,7 @@ name: Release Drafter
on: on:
workflow_call: workflow_call:
permissions: {} permissions: read-all
jobs: jobs:
update_release_draft: update_release_draft:

View File

@@ -7,7 +7,7 @@ on:
schedule: schedule:
- cron: "0 0 1 * *" # 1st of every month at midnight - cron: "0 0 1 * *" # 1st of every month at midnight
permissions: {} permissions: read-all
jobs: jobs:
release: release:

View File

@@ -3,7 +3,7 @@ name: Reviewdog Linters
on: [pull_request] on: [pull_request]
permissions: {} permissions: read-all
jobs: jobs:
linters: linters:

View File

@@ -7,7 +7,7 @@ on:
workflow_call: workflow_call:
workflow_dispatch: workflow_dispatch:
permissions: {} permissions: read-all
jobs: jobs:
stale: stale:

View File

@@ -12,7 +12,7 @@ on:
schedule: schedule:
- cron: "0 0 * * *" # Every day at midnight - cron: "0 0 * * *" # Every day at midnight
permissions: {} permissions: read-all
jobs: jobs:
sync-labels: sync-labels:

View File

@@ -13,7 +13,7 @@ on:
workflow_call: workflow_call:
workflow_dispatch: workflow_dispatch:
permissions: {} permissions: read-all
jobs: jobs:
labels: labels:
@@ -21,19 +21,6 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions: permissions:
issues: write issues: write
actions: read
attestations: read
checks: read
contents: read
deployments: read
discussions: read
packages: read
pages: read
pull-requests: read
repository-projects: read
statuses: read
security-events: read
id-token: read
steps: steps:
- name: ⤵️ Download latest labels definitions - name: ⤵️ Download latest labels definitions
run: | run: |