CalvinBackup/donutbrowser
1
0
Fork 0
mirror of https://github.com/zhom/donutbrowser.git synced 2026-07-25 05:40:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

build: assign read permission to all actions without one

Browse Source
This commit is contained in:
zhom
2025-06-18 00:17:58 +04:00
parent 2caac5bf4c
commit 2d2ebba40e
3 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/pr-checks.yml
+4
View File
@@ -16,11 +16,15 @@ jobs:
name: Lint JavaScript/TypeScript name: Lint JavaScript/TypeScript
uses: ./.github/workflows/lint-js.yml uses: ./.github/workflows/lint-js.yml
secrets: inherit secrets: inherit
permissions:
contents: read
lint-rust: lint-rust:
name: Lint Rust name: Lint Rust
uses: ./.github/workflows/lint-rs.yml uses: ./.github/workflows/lint-rs.yml
secrets: inherit secrets: inherit
permissions:
contents: read
security-scan: security-scan:
name: Security Vulnerability Scan name: Security Vulnerability Scan
.github/workflows/release.yml
+6
View File
@@ -31,11 +31,15 @@ jobs:
name: Lint JavaScript/TypeScript name: Lint JavaScript/TypeScript
uses: ./.github/workflows/lint-js.yml uses: ./.github/workflows/lint-js.yml
secrets: inherit secrets: inherit
permissions:
contents: read
lint-rust: lint-rust:
name: Lint Rust name: Lint Rust
uses: ./.github/workflows/lint-rs.yml uses: ./.github/workflows/lint-rs.yml
secrets: inherit secrets: inherit
permissions:
contents: read
codeql: codeql:
name: CodeQL name: CodeQL
@@ -51,6 +55,8 @@ jobs:
name: Spell Check name: Spell Check
uses: ./.github/workflows/spellcheck.yml uses: ./.github/workflows/spellcheck.yml
secrets: inherit secrets: inherit
permissions:
contents: read
release: release:
needs: [security-scan, lint-js, lint-rust, codeql, spellcheck] needs: [security-scan, lint-js, lint-rust, codeql, spellcheck]
.github/workflows/rolling-release.yml
+6
View File
@@ -30,11 +30,15 @@ jobs:
name: Lint JavaScript/TypeScript name: Lint JavaScript/TypeScript
uses: ./.github/workflows/lint-js.yml uses: ./.github/workflows/lint-js.yml
secrets: inherit secrets: inherit
permissions:
contents: read
lint-rust: lint-rust:
name: Lint Rust name: Lint Rust
uses: ./.github/workflows/lint-rs.yml uses: ./.github/workflows/lint-rs.yml
secrets: inherit secrets: inherit
permissions:
contents: read
codeql: codeql:
name: CodeQL name: CodeQL
@@ -50,6 +54,8 @@ jobs:
name: Spell Check name: Spell Check
uses: ./.github/workflows/spellcheck.yml uses: ./.github/workflows/spellcheck.yml
secrets: inherit secrets: inherit
permissions:
contents: read
rolling-release: rolling-release:
needs: [security-scan, lint-js, lint-rust, codeql, spellcheck] needs: [security-scan, lint-js, lint-rust, codeql, spellcheck]