Skip to content

Commit 0993493

Browse files
Fix actions permissions (#5580)
## Description To allow for the automatic creation of GH issues, we had to elevate test.yml to write issues. But unknowingly, this action restricted certain permissions in test.yml. Let's be explicit and enumerate all. ## Testing CI ## Documentation N/A
1 parent 6393eda commit 0993493

File tree

6 files changed

+14
-8
lines changed

6 files changed

+14
-8
lines changed

.github/workflows/build-darwin-framework.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,8 @@ concurrency:
1717
group: darwin-frameworks-${{ github.event.pull_request.number || github.sha }}
1818
cancel-in-progress: true
1919

20-
permissions: read-all
20+
permissions:
21+
contents: read
2122

2223
jobs:
2324
build-all-frameworks:

.github/workflows/build-reuse-darwin-framework.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,8 @@ on:
3030
default: ''
3131
type: string
3232

33-
permissions: read-all
33+
permissions:
34+
contents: read
3435

3536
jobs:
3637
build-darwin:

.github/workflows/build-reuse-unix.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,8 @@ on:
8686
default: '' # Empty string means build all
8787
type: string
8888

89-
permissions: read-all
89+
permissions:
90+
contents: read
9091

9192
jobs:
9293
build-unix-reuse:

.github/workflows/build-reuse-win.yml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ on:
4949
type: string
5050
# options:
5151
# - quictls
52-
# - openssl
52+
# - openssl
5353
# - schannel
5454
static:
5555
required: false
@@ -68,7 +68,8 @@ on:
6868
default: '' # Empty string means build all
6969
type: string
7070

71-
permissions: read-all
71+
permissions:
72+
contents: read
7273

7374
jobs:
7475
build-windows-reuse:

.github/workflows/build-reuse-winkernel.yml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,14 +46,15 @@ on:
4646
type: string
4747
# options:
4848
# - quictls
49-
# - openssl
49+
# - openssl
5050
# - schannel
5151
build:
5252
required: false
5353
default: '' # Empty string means build all
5454
type: string
5555

56-
permissions: read-all
56+
permissions:
57+
contents: read
5758

5859
jobs:
5960
build-windows-kernel-reuse:

.github/workflows/build.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,8 @@ concurrency:
1717
group: build-${{ github.event.pull_request.number || github.sha }}
1818
cancel-in-progress: true
1919

20-
permissions: read-all
20+
permissions:
21+
contents: read
2122

2223
jobs:
2324
build-windows:

0 commit comments

Comments
 (0)