Fix workflow code scanning results

github · Dec 3, 2024 · c4175e0 · c4175e0
1 parent be11bcb
commit c4175e0
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 4 deletions.
diff --git a/.github/workflows/licensed-ci.yaml b/.github/workflows/licensed-ci.yaml
@@ -29,7 +29,7 @@ jobs:
       with:
         node-version: 18
 
-    - uses: ruby/setup-ruby@v1
+    - uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc
       with:
         ruby-version: ruby
 

diff --git a/.github/workflows/test-action-run.yml b/.github/workflows/test-action-run.yml
@@ -1,4 +1,6 @@
 name: Test running setup-licensed
+permissions:
+  contents: read
 
 on:
   pull_request:
@@ -17,9 +19,9 @@ jobs:
     steps:
       # checkout the repo
       - uses: actions/checkout@v4
-      
+
       # install ruby
-      - uses: ruby/setup-ruby@v1
+      - uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc
         with:
           bundler-cache: 'true'
           ruby-version: "3.0"
@@ -41,7 +43,7 @@ jobs:
     steps:
       # checkout the repo
       - uses: actions/checkout@v4
-      
+
       # do not install ruby
 
       # install node

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -1,5 +1,7 @@
 name: "Test"
 on: push
+permissions:
+    contents: read
 
 jobs:
   test: