diff options
| author | Varun Sharma <varunsh@stepsecurity.io> | 2022-05-01 16:15:50 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-05-01 19:15:50 -0400 |
| commit | 6d68b63aecd37d98f836d29d2089010e30c3e3d3 (patch) | |
| tree | c7f451be959ffc5c130108a396a52e25cc816316 | |
| parent | 348f1b008313ed90a14794394ddd8e3c4e4e60f1 (diff) | |
| download | async-6d68b63aecd37d98f836d29d2089010e30c3e3d3.tar.gz | |
ci: Add GitHub token permissions for workflow (#1829)
| -rw-r--r-- | .github/workflows/ci.yml | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2b32ea4..34755fe 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -6,6 +6,9 @@ on: - "dependabot/**" pull_request: +permissions: + contents: read + jobs: lint: runs-on: ubuntu-latest @@ -25,6 +28,10 @@ jobs: run: npm run lint build: + permissions: + actions: write # for styfle/cancel-workflow-action to cancel/stop running workflows + checks: write # for coverallsapp/github-action to create new checks + contents: read # for actions/checkout to fetch code runs-on: ${{ matrix.os }} needs: lint strategy: |