Merge pull request #180065 from turrisxyz/Pinned-Dependencies-GitHub

chore: Set permissions for GitHub actions
2022-07-04 13:46:18 +02:00
parent a15c5b061f 5deff9583c
commit 6d0053bff1
2 changed files with 12 additions and 0 deletions
@@ -6,8 +6,13 @@ on:
      - 'nixos-**'
      - 'nixpkgs-**'

+permissions:
+  contents: read
+
 jobs:
  fail:
+    permissions:
+      contents: none
    name: "This PR is is targeting a channel branch"
    runs-on: ubuntu-latest
    steps:
@@ -5,8 +5,15 @@ on:
    - cron: "14 3 * * 1"
  workflow_dispatch:

+permissions:
+  contents: read
+
 jobs:
  tf-providers:
+    permissions:
+      contents: write  # for peter-evans/create-pull-request to create branch
+      issues: write  # for peter-evans/create-or-update-comment to create or update comment
+      pull-requests: write  # for peter-evans/create-pull-request to create a PR
    if: github.repository_owner == 'NixOS' && github.ref == 'refs/heads/master' # ensure workflow_dispatch only runs on master
    runs-on: ubuntu-latest
    steps: