Skip to content

Commit 1f36a51

Browse files
authored
Add permissions: {} to all reusable workflows (#148114)
Add permissions: {} to all reusable workflows
1 parent 4ff8b07 commit 1f36a51

12 files changed

+20
-8
lines changed

.github/workflows/reusable-check-c-api-docs.yml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,7 @@ name: Reusable C API Docs Check
33
on:
44
workflow_call:
55

6-
permissions:
7-
contents: read
6+
permissions: {}
87

98
env:
109
FORCE_COLOR: 1

.github/workflows/reusable-check-html-ids.yml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,7 @@ name: Reusable check HTML IDs
33
on:
44
workflow_call:
55

6-
permissions:
7-
contents: read
6+
permissions: {}
87

98
env:
109
FORCE_COLOR: 1

.github/workflows/reusable-cifuzz.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,8 @@ on:
1313
required: true
1414
type: string
1515

16+
permissions: {}
17+
1618
jobs:
1719
cifuzz:
1820
name: ${{ inputs.oss-fuzz-project-name }} (${{ inputs.sanitizer }})

.github/workflows/reusable-context.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -54,6 +54,8 @@ on: # yamllint disable-line rule:truthy
5454
description: Whether to run the Windows tests
5555
value: ${{ jobs.compute-changes.outputs.run-windows-tests }} # bool
5656

57+
permissions: {}
58+
5759
jobs:
5860
compute-changes:
5961
name: Create context from changed files

.github/workflows/reusable-docs.yml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,7 @@ on:
44
workflow_call:
55
workflow_dispatch:
66

7-
permissions:
8-
contents: read
7+
permissions: {}
98

109
concurrency:
1110
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}

.github/workflows/reusable-emscripten.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@ name: Reusable Emscripten
33
on:
44
workflow_call:
55

6+
permissions: {}
7+
68
env:
79
FORCE_COLOR: 1
810

.github/workflows/reusable-macos.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,8 @@ on:
1212
required: true
1313
type: string
1414

15+
permissions: {}
16+
1517
env:
1618
FORCE_COLOR: 1
1719

.github/workflows/reusable-san.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,8 @@ on:
1212
type: boolean
1313
default: false
1414

15+
permissions: {}
16+
1517
env:
1618
FORCE_COLOR: 1
1719

.github/workflows/reusable-ubuntu.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,8 @@ on:
2323
type: string
2424
default: ''
2525

26+
permissions: {}
27+
2628
env:
2729
FORCE_COLOR: 1
2830

.github/workflows/reusable-wasi.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@ name: Reusable WASI
33
on:
44
workflow_call:
55

6+
permissions: {}
7+
68
env:
79
FORCE_COLOR: 1
810

0 commit comments

Comments
 (0)