Merge pull request #4734 from sashashura/patch-7

GitHub Workflows security hardening
2022-09-27 15:31:54 +02:00 · 2022-09-27 15:31:54 +02:00 · ca11fceb65
parent e477533a6d 92c7419a28
commit ca11fceb65
2 changed files with 6 additions and 0 deletions
--- a/.github/workflows/ccpp.yml
+++ b/.github/workflows/ccpp.yml
@ -6,6 +6,9 @@ on:
  pull_request:
    branches: [ master ]

+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
  job:
    name: ${{ matrix.name }}-build-and-test
--- a/.github/workflows/sanitizer.yml
+++ b/.github/workflows/sanitizer.yml
@ -6,6 +6,9 @@ on:
  pull_request:
    branches: [ master ]

+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
  job1:
    name: adress-sanitizer