fix permissions

adoptium · Aug 9, 2024 · a71452b · a71452b
1 parent 7e043f8
commit a71452b
Show file tree

Hide file tree

Showing 5 changed files with 11 additions and 6 deletions.
diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
@@ -4,7 +4,8 @@ on:
   pull_request:
     types: [labeled]
 
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   automerge:

diff --git a/.github/workflows/code-freeze.yml b/.github/workflows/code-freeze.yml
@@ -19,7 +19,9 @@ on:
   issue_comment:
     types: [created]
 
-permissions: read-all
+permissions:
+  contents: write
+  pull-requests: write
 
 jobs:
   # Check if the pull request target branch matches the required branch-regex?

diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
@@ -1,7 +1,8 @@
 name: Dependabot auto-merge
 on: pull_request_target
 
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   dependabot:

diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -14,8 +14,8 @@ on:
   push:
     branches: ["main"]
 
-# Declare default permissions as read only.
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   analysis:

diff --git a/.github/workflows/updater.yml b/.github/workflows/updater.yml
@@ -5,7 +5,8 @@ on:
     # Runs every half hour
     - cron: "*/30 * * * *"
 
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   update_dockerfile: