Add the default-permissions check to chainguard-dev (#47)

Signed-off-by: Matt Moore <[email protected]>
chainguard-dev · Mar 22, 2024 · b14538a · b14538a
1 parent de06a03
commit b14538a
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/ghaudit.yaml b/.github/workflows/ghaudit.yaml
@@ -28,6 +28,14 @@ jobs:
         packages: ghaudit
         command: ghaudit org -o ${{ github.repository_owner }} deploy-keys
 
+    - name: Default Permissions
+      uses: wolfi-dev/wolfi-act@main
+      env:
+        GH_TOKEN: ${{ steps.octo-sts.outputs.token }}
+      with:
+        packages: ghaudit
+        command: ghaudit org -o ${{ github.repository_owner }} default-permissions
+
     - uses: rtCamp/action-slack-notify@4e5fb42d249be6a45a298f3c9543b111b02f7907 # v2.3.0
       if: ${{ failure() }}
       env: