From dff4b11d10ecc84d937fdd0653d8343a88c5b9c4 Mon Sep 17 00:00:00 2001 From: Josh Gross Date: Wed, 21 May 2025 15:02:42 -0400 Subject: [PATCH] ci(test): set `permissions` in test workflow (#247) - https://github.com/actions/create-github-app-token/security/code-scanning/13 - https://github.com/actions/create-github-app-token/security/code-scanning/14 This defines `permissions` on the `test.yml` workflow to align with our Actions security best-practices and ensure workflows only have the minimum required permissions. Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com> --- .github/workflows/test.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index ab2b03f..05129a6 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -11,6 +11,9 @@ concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true +permissions: + contents: read + jobs: integration: name: Integration