Merge pull request #224 from creative-commoners/pulls/master/workflow…

…-permissions ENH Add workflow permissions
silverstripe · Apr 17, 2024 · 8ff04cd · 8ff04cd
2 parents b616b30 + d89afb0
commit 8ff04cd
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/js-prs-issue.yml b/.github/workflows/js-prs-issue.yml
@@ -7,12 +7,16 @@ on:
     - cron: '0 12 1 */3 *'
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   js-prs-issue:
     name: JS PRs issue
     # Only run cron on the silverstripe account
     if: (github.event_name == 'schedule' && github.repository_owner == 'silverstripe') || (github.event_name != 'schedule')
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     steps:
       - name: Get Alerts List
         id: get-alerts-list

diff --git a/.github/workflows/keepalive.yml b/.github/workflows/keepalive.yml
@@ -6,12 +6,16 @@ on:
     - cron: '50 10 4 * *'
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   keepalive:
     name: Keepalive
     # Only run cron on the silverstripe account
     if: (github.event_name == 'schedule' && github.repository_owner == 'silverstripe') || (github.event_name != 'schedule')
     runs-on: ubuntu-latest
+    permissions:
+      actions: write
     steps:
       - name: Keepalive
         uses: silverstripe/gha-keepalive@v1
diff --git a/.github/workflows/translation-issue.yml b/.github/workflows/translation-issue.yml
@@ -6,12 +6,16 @@ on:
     - cron: '0 7 1 2,5,8,11 *'
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   translation-issue:
     name: Translation issue
     # Only run cron on the silverstripe account
     if: (github.event_name == 'schedule' && github.repository_owner == 'silverstripe') || (github.event_name != 'schedule')
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     steps:
       - name: Translation issue
         uses: silverstripe/gha-issue@v1