Fix token-perssion issue

Signed-off-by: Min Xu <[email protected]>
intel · Jul 2, 2024 · 3a5a523 · 3a5a523
1 parent 01fbc38
commit 3a5a523
Show file tree

Hide file tree

Showing 7 changed files with 17 additions and 3 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -21,7 +21,7 @@ on:
     - cron: "0 0 * * 1"
 
 permissions:
-  contents: read
+  contents: read-all
 
 jobs:
   analyze:

diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml
@@ -6,6 +6,8 @@ on:
     pull_request:
       paths-ignore:
         - "**.md"
+permissions:
+  contents: read-all
 
 jobs:
   cargo-deny:

diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
@@ -13,6 +13,9 @@ env:
   AR: llvm-ar
   CC: clang
 
+permissions:
+  contents: read-all
+
 jobs:
   clippy:
     name: Clippy

diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
@@ -13,7 +13,7 @@ env:
   TOOLCHAIN_PROFILE: minimal
 
 permissions:
-  contents: read
+  contents: read-all
 
 jobs:
   integration:

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -1,3 +1,6 @@
+permissions:
+  contents: read-all
+
 on:
     push:
       paths-ignore:

diff --git a/.github/workflows/oss-fuzz.yml b/.github/workflows/oss-fuzz.yml
@@ -1,6 +1,9 @@
 name: oss-fuzz
 on: [pull_request]
-permissions: {}
+
+permissions:
+  contents: read
+
 jobs:
  Fuzzing:
    runs-on: ubuntu-latest

diff --git a/.github/workflows/unittest.yml b/.github/workflows/unittest.yml
@@ -1,3 +1,6 @@
+permissions:
+  contents: read-all
+
 on:
   push:
     paths-ignore: