diff options
| author | Varun Sharma <varunsh@stepsecurity.io> | 2022-05-21 07:55:21 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-05-21 07:55:21 (GMT) |
| commit | b96e20c1d9be4e6d5ea3e48c9c97e5ecd02f6055 (patch) | |
| tree | 0575b24e154e57365142a782a63dd069ce0ff4e6 | |
| parent | 7f835923c179d1d2da54b232e0113abc2c56ea31 (diff) | |
| download | cpython-b96e20c1d9be4e6d5ea3e48c9c97e5ecd02f6055.zip cpython-b96e20c1d9be4e6d5ea3e48c9c97e5ecd02f6055.tar.gz cpython-b96e20c1d9be4e6d5ea3e48c9c97e5ecd02f6055.tar.bz2 | |
ci: add GitHub token permissions (#92999)
| -rw-r--r-- | .github/workflows/build.yml | 3 | ||||
| -rw-r--r-- | .github/workflows/build_msi.yml | 3 | ||||
| -rw-r--r-- | .github/workflows/doc.yml | 3 | ||||
| -rw-r--r-- | .github/workflows/new-bugs-announce-notifier.yml | 5 |
4 files changed, 13 insertions, 1 deletions
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index e04633b..d800442 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -22,6 +22,9 @@ on: - '3.8' - '3.7' +permissions: + contents: read + jobs: check_source: name: 'Check for source changes' diff --git a/.github/workflows/build_msi.yml b/.github/workflows/build_msi.yml index ec18735..6044ae0 100644 --- a/.github/workflows/build_msi.yml +++ b/.github/workflows/build_msi.yml @@ -23,6 +23,9 @@ on: paths: - 'Tools/msi/**' +permissions: + contents: read + jobs: build_win32: name: 'Windows (x86) Installer' diff --git a/.github/workflows/doc.yml b/.github/workflows/doc.yml index 8c4a034..9cd2516 100644 --- a/.github/workflows/doc.yml +++ b/.github/workflows/doc.yml @@ -24,6 +24,9 @@ on: - 'Doc/**' - 'Misc/**' +permissions: + contents: read + jobs: build_doc: name: 'Docs' diff --git a/.github/workflows/new-bugs-announce-notifier.yml b/.github/workflows/new-bugs-announce-notifier.yml index 8cd8344..b2b6347 100644 --- a/.github/workflows/new-bugs-announce-notifier.yml +++ b/.github/workflows/new-bugs-announce-notifier.yml @@ -5,6 +5,9 @@ on: types: - opened +permissions: + issues: read + jobs: notify-new-bugs-announce: runs-on: ubuntu-latest @@ -39,7 +42,7 @@ jobs: assignee : issue.data.assignees.map(assignee => { return assignee.login }), body : issue.data.body }; - + const data = { from: "CPython Issues <github@mg.python.org>", to: "new-bugs-announce@python.org", |