From 8f8dfdb696b8a9c68f3c136bd2cc1b2c37422f6b Mon Sep 17 00:00:00 2001 From: Ismo Vuorinen Date: Wed, 29 Jan 2025 11:30:48 +0200 Subject: [PATCH] fix(ci): permissions, again --- .github/workflows/pr-lint.yml | 5 +++++ .github/workflows/release-drafter.yml | 5 +++++ .github/workflows/stale.yml | 4 ++++ .github/workflows/sync-labels.yml | 5 +++++ 4 files changed, 19 insertions(+) diff --git a/.github/workflows/pr-lint.yml b/.github/workflows/pr-lint.yml index 002a522..8f3d91a 100644 --- a/.github/workflows/pr-lint.yml +++ b/.github/workflows/pr-lint.yml @@ -9,6 +9,11 @@ on: pull_request: branches: [master, main] +permissions: + contents: read + packages: read + statuses: write + jobs: SuperLinter: uses: ivuorinen/.github/.github/workflows/pr-lint.yml@main diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml index a0b46e4..95c64e9 100644 --- a/.github/workflows/release-drafter.yml +++ b/.github/workflows/release-drafter.yml @@ -5,6 +5,11 @@ name: Release Drafter on: workflow_call: +permissions: + contents: write + statuses: write + packages: read + jobs: Draft: uses: ivuorinen/.github/.github/workflows/sync-labels.yml@main diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index 5c0c679..382f616 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -8,6 +8,10 @@ on: workflow_call: workflow_dispatch: +permissions: + packages: read + statuses: read + jobs: stale: uses: ivuorinen/.github/.github/workflows/stale.yml@main diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml index 4c0d43a..07b6355 100644 --- a/.github/workflows/sync-labels.yml +++ b/.github/workflows/sync-labels.yml @@ -14,6 +14,11 @@ on: workflow_call: workflow_dispatch: +permissions: + issues: write + contents: read + statuses: read + jobs: SyncLabels: uses: ivuorinen/.github/.github/workflows/sync-labels.yml@main