Update workflow permissions

paulsengroup · Jan 19, 2025 · 235d6c8 · 235d6c8
1 parent 50ca8a9
commit 235d6c8
Show file tree

Hide file tree

Showing 4 changed files with 23 additions and 0 deletions.
diff --git a/.github/workflows/build-almalinux9-cxx-image.yml b/.github/workflows/build-almalinux9-cxx-image.yml
@@ -19,9 +19,15 @@ defaults:
   run:
     shell: bash
 
+permissions:
+  contents: read
+
 jobs:
   build-almalinux9-image:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4

diff --git a/.github/workflows/build-centos7-cxx-image.yml b/.github/workflows/build-centos7-cxx-image.yml
@@ -19,9 +19,15 @@ defaults:
   run:
     shell: bash
 
+permissions:
+  contents: read
+
 jobs:
   build-centos7-image:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4

diff --git a/.github/workflows/build-cxx-ubuntu-images.yml b/.github/workflows/build-cxx-ubuntu-images.yml
@@ -25,6 +25,10 @@ defaults:
   run:
     shell: bash
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   build-dockerfile:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/build-modle-ci-ubuntu-images.yml b/.github/workflows/build-modle-ci-ubuntu-images.yml
@@ -22,13 +22,20 @@ defaults:
   run:
     shell: bash
 
+permissions:
+  contents: read
+
 jobs:
   build-ubuntu-image:
     runs-on: ubuntu-latest
     if: |
       github.event_name != 'workflow_run' ||
       github.event.workflow_run.conclusion == 'success'
 
+    permissions:
+      contents: read
+      packages: write
+
     strategy:
       fail-fast: false
       matrix: