mirror of
https://github.com/ivuorinen/actions.git
synced 2026-03-06 09:56:27 +00:00
fix: harden workflow permissions with deny-all top-level and least-privilege job scopes (#482)
This commit is contained in:
3
.github/workflows/release.yml
vendored
3
.github/workflows/release.yml
vendored
@@ -7,8 +7,7 @@ on:
|
||||
tags:
|
||||
- 'v*'
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
permissions: {}
|
||||
|
||||
jobs:
|
||||
release:
|
||||
|
||||
Reference in New Issue
Block a user