🤖 Update workflow permissions (#1021)

Signed-off-by: mudler <[email protected]>
kairos-io · Mar 2, 2023 · 331997b · 331997b
1 parent 3ae0702
commit 331997b
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 2 deletions.
diff --git a/.github/workflows/image-arm.yaml b/.github/workflows/image-arm.yaml
@@ -34,6 +34,9 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       id-token: write  # OIDC support
+      contents: write
+      actions: read
+      security-events: write
     strategy:
       fail-fast: false
       matrix: ${{fromJson(needs.get-matrix.outputs.matrix)}}

diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml
@@ -50,7 +50,10 @@ jobs:
     needs:
       - get-matrix
     permissions:
-      id-token: write
+      id-token: write  # OIDC support
+      contents: write
+      actions: read
+      security-events: write
     strategy:
       fail-fast: false
       matrix: ${{fromJson(needs.get-matrix.outputs.matrix)}}

diff --git a/.github/workflows/release-arm.yaml b/.github/workflows/release-arm.yaml
@@ -32,8 +32,10 @@ jobs:
     needs:
       - get-matrix
     permissions:
-      id-token: write
+      id-token: write  # OIDC support
       contents: write
+      actions: read
+      security-events: write
     strategy:
       fail-fast: false
       matrix: ${{fromJson(needs.get-matrix.outputs.matrix)}}

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -70,6 +70,8 @@ jobs:
     permissions:
       id-token: write  # OIDC support
       contents: write
+      actions: read
+      security-events: write
     strategy:
       fail-fast: false
       matrix: ${{fromJson(needs.get-matrix.outputs.matrix)}}