mirror of
https://github.com/ivuorinen/actions.git
synced 2026-03-07 21:56:30 +00:00
fix: harden workflow permissions with deny-all top-level and least-privilege job scopes (#482)
This commit is contained in:
4
.github/workflows/pr-lint.yml
vendored
4
.github/workflows/pr-lint.yml
vendored
@@ -37,9 +37,7 @@ concurrency:
|
||||
group: ${{ github.workflow }}-${{ github.ref }}
|
||||
cancel-in-progress: true
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
packages: read # Required for private dependencies
|
||||
permissions: {}
|
||||
|
||||
jobs:
|
||||
megalinter:
|
||||
|
||||
Reference in New Issue
Block a user