Merge pull request #4092 from sashashura/patch-4

GitHub Workflows security hardening
2026-06-10 15:48:22 -07:00 · 2022-10-31 10:24:08 +01:00
parent ba3bb56041 d5ab502f42
commit 59d4cae7e9
1 changed files with 5 additions and 0 deletions
@@ -6,8 +6,13 @@ on:
    types:
      - completed

+permissions: {}
 jobs:
  post-comment:
+    permissions:
+      actions: read  #  to list workflow runs artifacts
+      pull-requests: write  #  to comment on pr
+
    runs-on: ubuntu-latest
    if: >
      github.event.workflow_run.event == 'pull_request'