Merge pull request #2746 from step-security-bot/stepsecurity_remediat…

…ion_1729119248 [StepSecurity] ci: Harden GitHub Actions
lima-vm · Oct 16, 2024 · 536a954 · 536a954
2 parents c8279f7 + 98bbc09
commit 536a954
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
@@ -9,6 +9,9 @@ on:
   - cron: '33 19 * * 5'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -13,6 +13,9 @@ on:
     - 'master'
 env:
   GO111MODULE: on
+permissions:
+  contents: read
+
 jobs:
   artifacts-darwin:
     name: Artifacts Darwin