From faacdd286b8818c34903d36d6d68a0be7ed04968 Mon Sep 17 00:00:00 2001 From: Sylvestre Ledru Date: Sat, 6 Jun 2026 08:30:43 +0200 Subject: [PATCH] ci: add minimal permissions to workflows --- .github/workflows/audit.yml | 4 ++++ .github/workflows/documentation.yml | 3 +++ .github/workflows/manpage-lint.yml | 3 +++ 3 files changed, 10 insertions(+) diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index f17e67eb3..26ac9d590 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -5,6 +5,10 @@ name: Security audit on: schedule: - cron: "0 0 * * *" + +permissions: + contents: read + jobs: audit: runs-on: ubuntu-latest diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml index 138d99279..1ca8316db 100644 --- a/.github/workflows/documentation.yml +++ b/.github/workflows/documentation.yml @@ -17,6 +17,9 @@ on: - 'src/uu/*/locales/en-US.ftl' - 'Cargo.toml' +permissions: + contents: read + jobs: check-doc: name: Verify uudoc generates correct documentation diff --git a/.github/workflows/manpage-lint.yml b/.github/workflows/manpage-lint.yml index 8f3c6df00..f6ad5bbf0 100644 --- a/.github/workflows/manpage-lint.yml +++ b/.github/workflows/manpage-lint.yml @@ -22,6 +22,9 @@ on: - 'GNUmakefile' - '.github/workflows/manpage-lint.yml' +permissions: + contents: read + jobs: manpage-lint: name: Validate manpages with mandoc