Add permissions

Yubico · May 6, 2024 · 44c1d4e · 44c1d4e
1 parent e6298d8
commit 44c1d4e
Show file tree

Hide file tree

Showing 6 changed files with 15 additions and 5 deletions.
diff --git a/.github/workflows/build-pull-requests.yml b/.github/workflows/build-pull-requests.yml
@@ -29,13 +29,15 @@ on:
       - '**.sln'
       - '.github/workflows/build-pull-requests.yml'
       - '**.yml'
-
+      -
+permissions:
+  pull-requests: write
+  checks: write
+  contents: read
+  packages: read
+
 jobs:
   test:
-    permissions:
-      pull-requests: write
-      checks: write
-      contents: read
     name: Run tests
     uses: ./.github/workflows/test.yml
 

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -50,6 +50,7 @@ jobs:
     permissions:
       pull-requests: write
       checks: write
+      packages: read
     name: Run tests
     uses: ./.github/workflows/test.yml
 

diff --git a/.github/workflows/test-macos.yml b/.github/workflows/test-macos.yml
@@ -22,6 +22,8 @@ jobs:
     runs-on: macos-latest
     permissions:
       contents: read
+      packages: read
+
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-dotnet@v4

diff --git a/.github/workflows/test-ubuntu.yml b/.github/workflows/test-ubuntu.yml
@@ -22,6 +22,8 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
+      packages: read
+
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-dotnet@v4

diff --git a/.github/workflows/test-windows.yml b/.github/workflows/test-windows.yml
@@ -21,7 +21,9 @@ jobs:
   test:
     runs-on: windows-latest
     permissions:
+      packages: read
       contents: read
+
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-dotnet@v4

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -45,6 +45,7 @@ permissions:
   pull-requests: write
   contents: read
   checks: write
+  packages: read
 
 jobs:
   test-windows: