summaryrefslogtreecommitdiff
path: root/.github/workflows
diff options
context:
space:
mode:
authorNed Batchelder <ned@nedbatchelder.com>2022-08-03 11:55:49 -0400
committerNed Batchelder <ned@nedbatchelder.com>2022-08-03 11:55:49 -0400
commit08b9db03d303f208fd276a86c231c94b2ea7d5b1 (patch)
tree141c61ea4b03ad1a520f332a73385cfc0c275335 /.github/workflows
parentaa340803944d406622bbfce16107d25a9d55b2cf (diff)
downloadpython-coveragepy-git-08b9db03d303f208fd276a86c231c94b2ea7d5b1.tar.gz
build: be explicit about actions only having permission to read contents
Diffstat (limited to '.github/workflows')
-rw-r--r--.github/workflows/coverage.yml3
-rw-r--r--.github/workflows/python-nightly.yml3
2 files changed, 6 insertions, 0 deletions
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index eb21145d..ac1ee43d 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -19,6 +19,9 @@ defaults:
env:
PIP_DISABLE_PIP_VERSION_CHECK: 1
+permissions:
+ contents: read
+
jobs:
coverage:
name: "Python ${{ matrix.python-version }} on ${{ matrix.os }}"
diff --git a/.github/workflows/python-nightly.yml b/.github/workflows/python-nightly.yml
index 6aec3b8b..ea71bb27 100644
--- a/.github/workflows/python-nightly.yml
+++ b/.github/workflows/python-nightly.yml
@@ -22,6 +22,9 @@ env:
PIP_DISABLE_PIP_VERSION_CHECK: 1
COVERAGE_IGOR_VERBOSE: 1
+permissions:
+ contents: read
+
jobs:
tests:
name: "Python ${{ matrix.python-version }}"