Add permissions

Yubico · May 6, 2024 · 28b9c8f · 28b9c8f
1 parent 9473ac0
commit 28b9c8f
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 7 deletions.
diff --git a/.github/workflows/build-pull-requests.yml b/.github/workflows/build-pull-requests.yml
@@ -19,7 +19,7 @@ on:
   pull_request:
     branches:
       - main
-      - 'develop**'
+      - 'develop/**'
       - 'release/**'
     paths:
       - '**.h'
@@ -32,12 +32,15 @@ on:
 
 jobs:
   test:
+    permissions:
+      pull-requests: write
+      checks: write
     name: Run tests
     uses: ./.github/workflows/test.yml
+
   build:
     name: Build
     runs-on: windows-latest
-
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-dotnet@v4

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -42,19 +42,20 @@ on:
         type: string
 
 permissions:
-  contents: read
   id-token: write
   packages: write
 
 jobs:
   test:
+    permissions:
+      pull-requests: write
+      checks: write
     name: Run tests
     uses: ./.github/workflows/test.yml
-    
+
   build:
     name: Build, save artefacts
     runs-on: windows-2019
-
     steps:
       # Checkout the local repository
       - uses: actions/checkout@v4

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -88,7 +88,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
-      contents: read
       checks: write
     needs: coverage 
     if: github.event_name == 'pull_request'
@@ -111,7 +110,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
-      contents: read
       checks: write
     needs: [test-windows, test-ubuntu, test-macOS] 
     if: github.event_name == 'pull_request'