Merge pull request #407 from KisaragiEffective/ci/hardening-workflow-…

…permissions
KisaragiEffective · May 30, 2024 · 26bdd1b · 26bdd1b
2 parents efb11c2 + af537af
commit 26bdd1b
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
@@ -33,6 +33,9 @@ on:
     paths:
       - '.github/workflows/**'
 
+permissions:
+  contents: read
+
 jobs:
   actionlint:
     name: actionlint with reviewdog

diff --git a/.github/workflows/cargo-deny.yml b/.github/workflows/cargo-deny.yml
@@ -6,6 +6,9 @@ on:
       - '.github/workflows/cargo-deny.yml'
       - 'Cargo.lock'
 
+permissions:
+  contents: read
+
 jobs:
   cargo-deny:
     name: check

diff --git a/.github/workflows/rust-wasm.yml b/.github/workflows/rust-wasm.yml
@@ -18,6 +18,9 @@ env:
   CARGO_TERM_COLOR: always
   CI_RUST_CACHE_VERSION: v0
 
+permissions:
+  contents: read
+
 jobs:
   build:
     strategy:

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
@@ -10,6 +10,9 @@ env:
   CARGO_TERM_COLOR: always
   CI_RUST_CACHE_VERSION: v1
 
+permissions:
+  contents: read
+
 jobs:
   build:
     strategy: