GitHub Actions: Reduce permissions to guard against malicious 3rd par…

…ty actions
json-api-dotnet · Sep 17, 2023 · f55da1f · f55da1f
1 parent 93c082c
commit f55da1f
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -35,6 +35,8 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
     steps:
     - name: Setup PostgreSQL
       uses: ikalnytskyi/action-setup-postgres@v4
@@ -152,6 +154,8 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
     steps:
     - name: Git checkout
       uses: actions/checkout@v3
@@ -201,6 +205,8 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
     steps:
     - name: Git checkout
       uses: actions/checkout@v3