mirror of
https://github.com/ianstormtaylor/slate.git
synced 2025-09-08 22:20:41 +02:00
GitHub Workflows security hardening (#5138)
* build: harden comment.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> * build: harden ci.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> * build: harden release.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
5
.github/workflows/release.yml
vendored
5
.github/workflows/release.yml
vendored
@@ -5,8 +5,13 @@ on:
|
||||
branches:
|
||||
- main
|
||||
|
||||
permissions: {}
|
||||
jobs:
|
||||
release:
|
||||
permissions:
|
||||
contents: write # to create release (changesets/action)
|
||||
pull-requests: write # to create pull request (changesets/action)
|
||||
|
||||
name: ${{ matrix.channel }}
|
||||
runs-on: ubuntu-latest
|
||||
strategy:
|
||||
|
Reference in New Issue
Block a user