loot/yaml-cpp
0
0
Fork 0
mirror of https://github.com/loot/yaml-cpp.git synced 2026-07-27 14:13:42 -07:00
Code Issues Packages Projects Releases Wiki Activity

CI: define read-only permission for GitHub Workflow (#1175)

Browse Source 
It secures the repo against erroneous or malicious actions from external jobs you call from your workflow. It's specially important for the case they get compromised, for example.
This commit is contained in:
Diogo Teles Sant'Anna
2023-03-03 23:33:51 -06:00
committed by GitHub
parent bdc5582b35
commit d7f672d141
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/build.yml
+1
View File
@@ -5,6 +5,7 @@ on:
pull_request: pull_request:
branches: [ master ] branches: [ master ]
workflow_dispatch: workflow_dispatch:
permissions: read-all
jobs: jobs:
cmake-build: cmake-build:
strategy: strategy: