Adjust workflow permissions (#110)

* Adjust permissios for create-release action * Adjust permissios for junit-report action
DataDog · Aug 29, 2024 · 68dbe8b · 68dbe8b
1 parent 76aa0ff
commit 68dbe8b
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -57,6 +57,8 @@ jobs:
   cpp-test-libc:
     needs: ['build']
     runs-on: ubuntu-latest
+    permissions:
+      checks: write
     strategy:
       matrix:
         debian:
@@ -83,6 +85,8 @@ jobs:
   cpp-test-musl:
     needs: ['build']
     runs-on: ubuntu-latest
+    permissions:
+      checks: write
     strategy:
       matrix:
         alpine:
@@ -137,6 +141,8 @@ jobs:
             artifact: darwin-x64
 
     runs-on: ${{ matrix.target.os }}
+    permissions:
+      checks: write
     env:
       NPM_TAINTEDUTILS: true
     steps:

diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
@@ -53,6 +53,8 @@ jobs:
   cpp-test-libc:
     needs: ['build']
     runs-on: ubuntu-latest
+    permissions:
+      checks: write
     strategy:
       matrix:
         debian:
@@ -77,6 +79,8 @@ jobs:
   cpp-test-musl:
     needs: ['build']
     runs-on: ubuntu-latest
+    permissions:
+      checks: write
     strategy:
       matrix:
         alpine:
@@ -158,6 +162,8 @@ jobs:
             artifact: darwin-x64
 
     runs-on: ${{ matrix.target.os }}
+    permissions:
+      checks: write
     env:
       NPM_TAINTEDUTILS: true
     steps:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -34,6 +34,8 @@ jobs:
     needs: pack
     runs-on: ubuntu-latest
     environment: release
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v3
       - uses: codex-team/[email protected]