Minimize permissions to CI workflows (#1055)

Set only read permission on CI workflows since they don't need write access.
uber-go · Mar 20, 2023 · 5f49c6d · 5f49c6d
1 parent 24e8b1a
commit 5f49c6d
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/.github/workflows/fossa.yaml b/.github/workflows/fossa.yaml
@@ -15,3 +15,5 @@ jobs:
         with:
           api-key: ${{ secrets.FOSSA_API_KEY }}
 
+permissions:
+  contents: read
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
@@ -7,6 +7,9 @@ on:
   pull_request:
     branches: ['*']
 
+permissions:
+  contents: read
+
 jobs:
 
   build: