Skip to content

Commit 0afb285

Browse files
committed
chore(ci): Lower privileges on all workflows
1 parent 6420e79 commit 0afb285

File tree

6 files changed

+15
-0
lines changed

6 files changed

+15
-0
lines changed

.github/workflows/py_check.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,8 @@ name: "Python: Syntax checks"
44
"on":
55
workflow_call:
66

7+
permissions: {}
8+
79
jobs:
810
shell:
911
name: "Python application"

.github/workflows/shell_check.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,8 @@ name: "Shell: Syntax checks"
44
"on":
55
workflow_call:
66

7+
permissions: {}
8+
79
jobs:
810
shell:
911
name: "Shell scripts"

.github/workflows/tf_module_check.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,9 @@ name: "Terraform Module: Code checks"
33

44
"on":
55
workflow_call:
6+
7+
permissions: {}
8+
69
jobs:
710
terraform:
811
name: "Terraform Module"

.github/workflows/tf_project_apply.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,9 @@ name: "Terraform Project: Apply Plan"
1010
TFE_TOKEN:
1111
description: "Terraform Cloud Token. Used for backend's authentication and ressource management"
1212
required: false
13+
14+
permissions: {}
15+
1316
jobs:
1417
terraform:
1518
name: "Terraform Project"

.github/workflows/tf_project_plan.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,9 @@ name: "Terraform Project: Generate Plan"
1010
TFE_TOKEN:
1111
description: "Terraform Cloud Token. Used for backend's authentication and ressource management"
1212
required: false
13+
14+
permissions: {}
15+
1316
jobs:
1417
terraform:
1518
name: "Terraform Project"

.github/workflows/yaml_check.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,8 @@ name: "YAML: Syntax checks"
44
"on":
55
workflow_call:
66

7+
permissions: {}
8+
79
jobs:
810
yaml:
911
name: "YAML"

0 commit comments

Comments
 (0)