ci: disable all permissions by default

mscharley · Mar 14, 2024 · 27490ce · 27490ce
1 parent 6be8fe4
commit 27490ce
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 0 deletions.
diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml
@@ -19,6 +19,8 @@ on:
       - '**.md'
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   check-dist:
     name: Check dist/

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -7,6 +7,8 @@ on:
       - main
       - 'releases/*'
 
+permissions: {}
+
 jobs:
   test-typescript:
     name: TypeScript Tests

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -10,6 +10,8 @@ on:
   schedule:
     - cron: '31 7 * * 3'
 
+permissions: {}
+
 jobs:
   analyze:
     name: Analyze

diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
@@ -8,6 +8,8 @@ on:
     branches-ignore:
       - main
 
+permissions: {}
+
 jobs:
   lint:
     name: Lint Code Base

diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
@@ -4,6 +4,8 @@ on:
     - cron: '30 1 * * *'
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   stale:
     uses: mscharley/.github/.github/workflows/stale.yml@main
-Original file line number
+Diff line change
@@ Expand Up / @@ -8,6 +8,8 @@ on: @@
         branches-ignore:
           - main
+    permissions: {}
     jobs:
       lint:
         name: Lint Code Base
@@ Expand Down @@