From 41932d4db3d463a563ca2fc783f1a709c67963fe Mon Sep 17 00:00:00 2001 From: Weii Wang Date: Fri, 29 May 2026 00:06:47 +0800 Subject: [PATCH 1/2] chore(ci): add actions:read and contents:write permissions to publish workflows --- .github/workflows/publish_charm.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish_charm.yaml b/.github/workflows/publish_charm.yaml index a84cba1..ba05d79 100644 --- a/.github/workflows/publish_charm.yaml +++ b/.github/workflows/publish_charm.yaml @@ -3,10 +3,13 @@ name: Publish to edge on: push: branches: - - main - - track/* + - main + - track/* jobs: publish-to-edge: uses: canonical/operator-workflows/.github/workflows/publish_charm.yaml@main + permissions: + actions: read + contents: write secrets: inherit From 1930b2ad125dc8c3320ed45997f8edf47dbea61f Mon Sep 17 00:00:00 2001 From: Sebastien Georget Date: Mon, 1 Jun 2026 10:57:52 +0200 Subject: [PATCH 2/2] Add permissions --- .github/workflows/test.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index f2afcb2..930d2e6 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -6,6 +6,9 @@ on: jobs: unit-tests: uses: canonical/operator-workflows/.github/workflows/test.yaml@main + permissions: + contents: read + pull-requests: write secrets: inherit with: vale-style-check: false