adjust permissions

btschwertfeger · Mar 14, 2024 · 695d4f5 · 695d4f5
1 parent c62d916
commit 695d4f5
Show file tree

Hide file tree

Showing 8 changed files with 12 additions and 10 deletions.
diff --git a/.github/workflows/_build.yaml b/.github/workflows/_build.yaml
@@ -8,7 +8,8 @@
 
 name: Build
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
   workflow_call:

diff --git a/.github/workflows/_build_doc.yaml b/.github/workflows/_build_doc.yaml
@@ -7,7 +7,8 @@
 
 name: Build Doc
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
   workflow_call:

diff --git a/.github/workflows/_codecov.yaml b/.github/workflows/_codecov.yaml
@@ -8,7 +8,8 @@
 
 name: CodeCov
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
   workflow_call:

diff --git a/.github/workflows/_codeql.yaml b/.github/workflows/_codeql.yaml
@@ -12,8 +12,6 @@
 
 name: CodeQL
 
-permissions: read-all
-
 on:
   workflow_call:
 

diff --git a/.github/workflows/_pre_commit.yaml b/.github/workflows/_pre_commit.yaml
@@ -7,7 +7,8 @@
 
 name: Pre-Commit
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
   workflow_call:

diff --git a/.github/workflows/_pypi_publish.yaml b/.github/workflows/_pypi_publish.yaml
@@ -9,7 +9,8 @@
 
 name: PyPI Publish
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
   workflow_call:

diff --git a/.github/workflows/_test.yaml b/.github/workflows/_test.yaml
@@ -7,7 +7,8 @@
 
 name: Test Spot
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
   workflow_call:

diff --git a/.github/workflows/cicd.yaml b/.github/workflows/cicd.yaml
@@ -7,8 +7,6 @@
 
 name: CI/CD
 
-permissions: read-all
-
 on:
   push:
     branches:
-Original file line number
+Diff line change
@@ Expand Up / @@ -12,8 +12,6 @@ @@
     name: CodeQL
-    permissions: read-all
     on:
       workflow_call:
@@ Expand Down @@