From ef00a0afbb540db022eb79fc3aea57b5603d7a47 Mon Sep 17 00:00:00 2001 From: Ashely Tenesaca Date: Tue, 19 Aug 2025 20:55:24 +0000 Subject: [PATCH] add permissions to workflows --- .github/workflows/check-dist.yml | 3 +++ .github/workflows/ci.yml | 3 +++ .github/workflows/codeql.yml | 2 +- 3 files changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml index 48dd78c..66bc632 100644 --- a/.github/workflows/check-dist.yml +++ b/.github/workflows/check-dist.yml @@ -16,6 +16,9 @@ on: - '**.md' workflow_dispatch: +permissions: + contents: read + jobs: check-dist: runs-on: ubuntu-latest diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index da08436..0737399 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -10,6 +10,9 @@ on: paths-ignore: - '**.md' +permissions: + contents: read + jobs: test: runs-on: ubuntu-latest diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index b040ff7..47238be 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -20,7 +20,7 @@ jobs: strategy: fail-fast: false matrix: - language: [ 'javascript-typescript', 'actions' ] + language: [ 'javascript-typescript', 'actions', 'ruby' ] steps: - name: Checkout repository