mirrors/Mindustry
1
Fork 0
mirror of https://github.com/Anuken/Mindustry.git synced 2025-12-06 02:40:23 -08:00
Code Issues Projects Releases Wiki Activity

GitHub Workflows security hardening (#7629)

Browse source 
* build: harden push.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

* build: harden deployment.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

* build: harden pr.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
Alex 2022-09-27 14:10:18 +02:00 • committed by GitHub
parent e21cac75b5
commit a68c17d876
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.github/workflows/deployment.yml vendored
View file

@ -5,8 +5,12 @@ on:
tags:
- 'v*'
permissions: {}
jobs:
deploy:
permissions:
contents: write # for release creation (svenstaro/upload-release-action)
runs-on: ubuntu-latest
steps:

3
.github/workflows/pr.yml vendored
View file

@ -2,6 +2,9 @@ name: Pull Request Tests
on: [pull_request, workflow_dispatch]
permissions:
contents: read # to fetch code (actions/checkout)
jobs:
testPR:
runs-on: ubuntu-latest

4
.github/workflows/push.yml vendored
View file

@ -2,8 +2,12 @@ name: Tests
on: [push, workflow_dispatch]
permissions: {}
jobs:
runPush:
permissions:
contents: write # for Update bundles
runs-on: ubuntu-latest
steps: