mirrors/Mindustry
1
0
Fork 0
mirror of https://github.com/Anuken/Mindustry.git synced 2025-08-04 08:59:33 +07:00
Code Issues Packages Projects Releases Wiki Activity

GitHub Workflows security hardening (#7629)

Browse Source 
* build: harden push.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

* build: harden deployment.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

* build: harden pr.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
Alex
2022-09-27 14:10:18 +02:00
committed by GitHub
parent e21cac75b5
commit a68c17d876
3 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/deployment.yml vendored
View File

@ -5,8 +5,12 @@ on:
tags: tags:
- 'v*' - 'v*'
permissions: {}
jobs: jobs:
deploy: deploy:
permissions:
contents: write # for release creation (svenstaro/upload-release-action)
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:

3
.github/workflows/pr.yml vendored
View File

@ -2,6 +2,9 @@ name: Pull Request Tests
on: [pull_request, workflow_dispatch] on: [pull_request, workflow_dispatch]
permissions:
contents: read # to fetch code (actions/checkout)
jobs: jobs:
testPR: testPR:
runs-on: ubuntu-latest runs-on: ubuntu-latest

4
.github/workflows/push.yml vendored
View File

@ -2,8 +2,12 @@ name: Tests
on: [push, workflow_dispatch] on: [push, workflow_dispatch]
permissions: {}
jobs: jobs:
runPush: runPush:
permissions:
contents: write # for Update bundles
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps: