Add top level read content permissions

* Add top level read content permissions * Remove unnecessary perm * Revert some changes * Don't think we need the content write perm <rikaitan.link>M2IzZmQ2N2E2NDg0MmRkYmVkZGFmYWE0OTFjOGY0MzZkZTA5ODlkMgo=</rikaitan.link>
Ajatt-Tools · Sep 2, 2024 · 0c0fe1a · 0c0fe1a
1 parent 5675b4a
commit 0c0fe1a
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 5 deletions.
diff --git a/.github/workflows/bench.yml b/.github/workflows/bench.yml
@@ -1,5 +1,6 @@
 name: Performance Benchmarks
-
+permissions:
+  contents: read
 on:
   push:
     branches: [master]

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -10,7 +10,8 @@
 # supported CodeQL languages.
 #
 name: "CodeQL"
-
+permissions:
+  contents: read
 on:
   push:
     branches: [ "master" ]

diff --git a/.github/workflows/publish-edge.yml b/.github/workflows/publish-edge.yml
@@ -8,8 +8,6 @@ jobs:
     environment: cd
     outputs:
       result: ${{ steps.webStorePublish.outcome }}
-    permissions:
-      actions: write
     steps:
       - uses: robinraju/release-downloader@a96f54c1b5f5e09e47d9504526e96febd949d4c2 # [email protected]
         with:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -8,7 +8,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       actions: write
-      contents: write
     steps:
       - name: Dispatch publish-chrome
         uses: aurelien-baudet/workflow-dispatch@3133c5d135c7dbe4be4f9793872b6ef331b53bc7 # pin@v2