Merge pull request prometheus#13288 from diogoteles08/feat/add-minimu…

…m-permissions-to-script scripts: Add minimal permissions to script golangci-lint.yml
grafana · Dec 18, 2023 · eec0069 · eec0069
2 parents 10557ed + 1a8381a
commit eec0069
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/scripts/golangci-lint.yml b/scripts/golangci-lint.yml
@@ -12,8 +12,14 @@ on:
       - ".golangci.yml"
   pull_request:
 
+permissions:  # added using https://github.com/step-security/secure-repo
+  contents: read
+
 jobs:
   golangci:
+    permissions:
+      contents: read  # for actions/checkout to fetch code
+      pull-requests: read  # for golangci/golangci-lint-action to fetch pull requests
     name: lint
     runs-on: ubuntu-latest
     steps: