[github-actions] set top-level permissions to read (#8518)

This commit is contained in:
Jonathan Hui
2022-12-12 16:18:44 -08:00
committed by GitHub
parent c5ee313500
commit b02bdb9e3b
6 changed files with 18 additions and 0 deletions
+3
View File
@@ -40,6 +40,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || (github.repository == 'openthread/openthread' && github.run_id) || github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
pretty:
+3
View File
@@ -40,6 +40,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || (github.repository == 'openthread/openthread' && github.run_id) || github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
backbone-router:
+3
View File
@@ -40,6 +40,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || (github.repository == 'openthread/openthread' && github.run_id) || github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
expects-linux:
+3
View File
@@ -40,6 +40,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || (github.repository == 'openthread/openthread' && github.run_id) || github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
distcheck:
+3
View File
@@ -40,6 +40,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || (github.repository == 'openthread/openthread' && github.run_id) || github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
size-report:
+3
View File
@@ -40,6 +40,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || (github.repository == 'openthread/openthread' && github.run_id) || github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
toranj-ncp: