From 30dd944c74f39298a89a717abc15f8c21c9cd123 Mon Sep 17 00:00:00 2001 From: Alex Date: Thu, 8 Dec 2022 18:48:54 +0200 Subject: build: harden build.yml permissions Signed-off-by: Alex --- .github/workflows/build.yml | 3 +++ 1 file changed, 3 insertions(+) (limited to '.github') diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 763d46faf..60d9f5545 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -6,6 +6,9 @@ env: # Customize the CMake build type here (Release, Debug, RelWithDebInfo, etc.) BUILD_TYPE: Release +permissions: + contents: read # to fetch code (actions/checkout) + jobs: build-linux: # The CMake configure and build commands are platform agnostic and should work equally -- cgit v1.2.3