More strict permissions (#85)

cristalhq · Mar 20, 2023 · 98f4645 · 98f4645
1 parent 2af24ae
commit 98f4645
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 43 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -1,6 +1,6 @@
 name: build
 
-permissions: read-all
+permissions: {} # no need any permissions
 
 on:
   push:
@@ -55,7 +55,7 @@ jobs:
       - name: Go Build
         run: go build -o /dev/null ./...
 
-      - name: Go Compile
+      - name: Go Compile Tests
         if: ${{ inputs.skipTests }}
         run: go test -exec /bin/true ./...
 

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -1,6 +1,6 @@
 name: lint
 
-permissions: read-all
+permissions: {} # no need any permissions
 
 on:
   push:
@@ -19,16 +19,16 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # latest
+        uses: actions/checkout@v3
 
       - name: Install Go
-        uses: actions/setup-go@v4 # latest
+        uses: actions/setup-go@v4
         with:
           go-version: 'stable'
           check-latest: true
 
       - name: Lint
-        uses: golangci/golangci-lint-action@08e2f20817b15149a52b5b3ebe7de50aff2ba8c5 # latest
+        uses: golangci/golangci-lint-action@v3.4.0
         with:
           version: latest
           args: --timeout 5m
diff --git a/.github/workflows/vuln.yml b/.github/workflows/vuln.yml
@@ -1,6 +1,6 @@
 name: vuln
 
-permissions: read-all
+permissions: {} # no need any permissions
 
 on:
   push: