diff --git a/.github/workflows/auto-tag.yml b/.github/workflows/auto-tag.yml index 32801df..8d7002f 100644 --- a/.github/workflows/auto-tag.yml +++ b/.github/workflows/auto-tag.yml @@ -4,10 +4,15 @@ on: tags: - '*.*.*' workflow_dispatch: + +permissions: {} + jobs: auto-tag: name: Auto-tag runs-on: ubuntu-latest + permissions: + contents: write steps: - name: Auto-tag uses: silverstripe/gha-auto-tag@v1 diff --git a/.github/workflows/keepalive.yml b/.github/workflows/keepalive.yml index 9d4bf00..31a5e07 100644 --- a/.github/workflows/keepalive.yml +++ b/.github/workflows/keepalive.yml @@ -1,17 +1,21 @@ name: Keepalive on: - # At 8:40 PM UTC, on day 25 of the month + # At 10:50 PM UTC, on day 19 of the month schedule: - - cron: '40 20 25 * *' + - cron: '50 22 19 * *' workflow_dispatch: +permissions: {} + jobs: keepalive: name: Keepalive # Only run cron on the silverstripe account if: (github.event_name == 'schedule' && github.repository_owner == 'silverstripe') || (github.event_name != 'schedule') runs-on: ubuntu-latest + permissions: + actions: write steps: - name: Keepalive uses: silverstripe/gha-keepalive@v1 diff --git a/.github/workflows/merge-up.yml b/.github/workflows/merge-up.yml index 1d895ac..182d957 100644 --- a/.github/workflows/merge-up.yml +++ b/.github/workflows/merge-up.yml @@ -1,17 +1,22 @@ name: Merge-up on: - # At 8:40 PM UTC, only on Wednesday + # At 1:05 PM UTC, only on Saturday schedule: - - cron: '40 20 * * 3' + - cron: '5 13 * * 6' workflow_dispatch: +permissions: {} + jobs: merge-up: name: Merge-up # Only run cron on the silverstripe account if: (github.event_name == 'schedule' && github.repository_owner == 'silverstripe') || (github.event_name != 'schedule') runs-on: ubuntu-latest + permissions: + contents: write + actions: write steps: - name: Merge-up uses: silverstripe/gha-merge-up@v1