From 4a6ebf0983289b67332334aa94812edf1a381e24 Mon Sep 17 00:00:00 2001 From: Jonathan Hui Date: Wed, 17 Jan 2024 07:04:35 -0800 Subject: [PATCH] [github-actions] add write permissions for geekyeggo/delete-artifact (#9780) --- .github/workflows/otbr.yml | 2 ++ .github/workflows/posix.yml | 2 ++ .github/workflows/simulation-1.1.yml | 2 ++ .github/workflows/simulation-1.2.yml | 2 ++ .github/workflows/toranj.yml | 2 ++ .github/workflows/unit.yml | 2 ++ 6 files changed, 12 insertions(+) diff --git a/.github/workflows/otbr.yml b/.github/workflows/otbr.yml index 16a0e813a..ae4202c31 100644 --- a/.github/workflows/otbr.yml +++ b/.github/workflows/otbr.yml @@ -259,6 +259,8 @@ jobs: delete-coverage-artifacts: needs: upload-coverage runs-on: ubuntu-20.04 + permissions: + actions: write steps: - uses: geekyeggo/delete-artifact@65041433121f7239077fa20be14c0690f70569de # v4.1.0 with: diff --git a/.github/workflows/posix.yml b/.github/workflows/posix.yml index 57f69e97a..775b8636a 100644 --- a/.github/workflows/posix.yml +++ b/.github/workflows/posix.yml @@ -318,6 +318,8 @@ jobs: delete-coverage-artifacts: needs: upload-coverage runs-on: ubuntu-20.04 + permissions: + actions: write steps: - name: Harden Runner uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1 diff --git a/.github/workflows/simulation-1.1.yml b/.github/workflows/simulation-1.1.yml index 80e2bc7bb..0a3308c2b 100644 --- a/.github/workflows/simulation-1.1.yml +++ b/.github/workflows/simulation-1.1.yml @@ -395,6 +395,8 @@ jobs: delete-coverage-artifacts: needs: upload-coverage runs-on: ubuntu-20.04 + permissions: + actions: write steps: - name: Harden Runner uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1 diff --git a/.github/workflows/simulation-1.2.yml b/.github/workflows/simulation-1.2.yml index 3b0e8f24d..e3cd040d2 100644 --- a/.github/workflows/simulation-1.2.yml +++ b/.github/workflows/simulation-1.2.yml @@ -376,6 +376,8 @@ jobs: delete-coverage-artifacts: needs: upload-coverage runs-on: ubuntu-20.04 + permissions: + actions: write steps: - name: Harden Runner uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1 diff --git a/.github/workflows/toranj.yml b/.github/workflows/toranj.yml index d9a851180..62af5b7ea 100644 --- a/.github/workflows/toranj.yml +++ b/.github/workflows/toranj.yml @@ -191,6 +191,8 @@ jobs: delete-coverage-artifacts: needs: upload-coverage runs-on: ubuntu-20.04 + permissions: + actions: write steps: - name: Harden Runner uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1 diff --git a/.github/workflows/unit.yml b/.github/workflows/unit.yml index 8a7f7ff9b..93d0bbf4b 100644 --- a/.github/workflows/unit.yml +++ b/.github/workflows/unit.yml @@ -131,6 +131,8 @@ jobs: delete-coverage-artifacts: needs: upload-coverage runs-on: ubuntu-20.04 + permissions: + actions: write steps: - name: Harden Runner uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1