build: explicitly set permissions for workflows

rajutkarsh07 · Dec 6, 2023 · 1eff72c · 1eff72c
1 parent b1cfcb4
commit 1eff72c
Show file tree

Hide file tree

Showing 4 changed files with 20 additions and 0 deletions.
diff --git a/.github/workflows/run_affected_benchmarks.yml b/.github/workflows/run_affected_benchmarks.yml
@@ -35,6 +35,11 @@ on:
       # List paths for which changes should trigger this workflow:
       - 'lib/**/benchmark/**'
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 

diff --git a/.github/workflows/run_affected_examples.yml b/.github/workflows/run_affected_examples.yml
@@ -36,6 +36,11 @@ on:
       # List paths for which changes should trigger this workflow:
       - 'lib/**/examples/**'
       - 'lib/**/README.md'
+
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
 
 # Workflow jobs:
 jobs:

diff --git a/.github/workflows/run_affected_tests.yml b/.github/workflows/run_affected_tests.yml
@@ -72,6 +72,11 @@ on:
       directories:
         description: 'List of changed directories for which to run affected tests (space separated):'
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 

diff --git a/.github/workflows/run_tests_coverage.yml b/.github/workflows/run_tests_coverage.yml
@@ -72,6 +72,11 @@ on:
       directories:
         description: 'List of changed directories for which to run tests (space separated):'
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs: