From 24393315bf2cd5d7e6983d11830562afa18e1574 Mon Sep 17 00:00:00 2001 From: Alex Date: Mon, 31 Oct 2022 01:42:57 +0200 Subject: [PATCH] GitHub Workflows security hardening (#1859) --- .github/workflows/super-linter.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/super-linter.yml b/.github/workflows/super-linter.yml index c38c150fa..ad756d892 100644 --- a/.github/workflows/super-linter.yml +++ b/.github/workflows/super-linter.yml @@ -3,8 +3,15 @@ name: Super Linter on: workflow_dispatch: +permissions: + contents: read # to fetch code (actions/checkout) + jobs: build: + permissions: + contents: read # to fetch code (actions/checkout) + statuses: write # to mark status of each linter run (github/super-linter/slim) + name: Lint Code Base runs-on: ubuntu-latest if: ${{ github.actor != 'dependabot[bot]' }}