Skip to content

Commit be3cdf6

Browse files
authored
fix(ci): add explicit permissions to lint.yml (#103)
CodeQL flagged lint.yml (actions/missing-workflow-permissions): no permissions block anywhere in the file, so it runs with whatever the repo's default token permissions are rather than what it actually needs. It only checks out and reads the repo -- contents: read covers everything the job does. Signed-off-by: Jimisola Laursen <jimisola@jimisola.com>
1 parent 50323bd commit be3cdf6

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

.github/workflows/lint.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,9 @@ on:
33
workflow_dispatch:
44
workflow_call:
55

6+
permissions:
7+
contents: read
8+
69
jobs:
710
linting:
811
runs-on: ubuntu-latest

0 commit comments

Comments
 (0)