Lock down workflow permissions. (#19406)

Co-authored-by: Joel Challis <git@zvecr.com>
This commit is contained in:
Nick Brassel 2022-12-23 10:41:16 +11:00 committed by GitHub
parent b8a9de206d
commit f75ac6042e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
13 changed files with 41 additions and 4 deletions

View File

@ -1,5 +1,8 @@
name: Update API Data
permissions:
contents: read
on:
push:
branches:

View File

@ -1,5 +1,7 @@
name: Automatic Approve
permissions: {}
on:
schedule:
- cron: "*/5 * * * *"

View File

@ -1,5 +1,8 @@
name: Essential files modified
permissions:
contents: write
on:
push:
branches:

View File

@ -1,5 +1,8 @@
name: CLI CI
permissions:
contents: read
on:
push:
branches:

View File

@ -1,5 +1,8 @@
name: Update develop after master merge
permissions:
contents: write
on:
push:
branches:

View File

@ -1,5 +1,8 @@
name: Generate Docs
permissions:
contents: write
on:
push:
branches:

View File

@ -1,5 +1,8 @@
name: Update feature branches after develop merge
permissions:
contents: write
on:
push:
branches:

View File

@ -1,5 +1,8 @@
name: PR Lint Format
permissions:
contents: read
on:
pull_request:
paths:

View File

@ -1,5 +1,8 @@
name: Lint Format
permissions:
contents: read
on:
push:
branches:

View File

@ -1,5 +1,9 @@
name: "Pull Request Labeler"
permissions:
contents: read
pull-requests: write
on:
pull_request_target:
types: [opened, synchronize, reopened, ready_for_review, locked]

View File

@ -1,5 +1,8 @@
name: PR Lint keyboards
permissions:
contents: read
on:
pull_request:
paths:

View File

@ -1,13 +1,14 @@
name: 'Close stale issues and PRs'
on:
schedule:
- cron: '30 1 * * *'
workflow_dispatch:
permissions:
issues: write
pull-requests: write
on:
schedule:
- cron: '30 1 * * *'
workflow_dispatch:
jobs:
stale:
runs-on: ubuntu-latest

View File

@ -1,5 +1,8 @@
name: Unit Tests
permissions:
contents: read
on:
push:
branches: