Set permissions for github workflows (openvinotoolkit#2127)

add top level permissions to github workflows
alexriedel1 · Jun 13, 2024 · 22caf3b · 22caf3b
1 parent 41d8cf9
commit 22caf3b
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/code_scan.yml b/.github/workflows/code_scan.yml
@@ -1,4 +1,5 @@
 name: Code Scanning
+permissions: read-all
 
 on:
   workflow_dispatch: # run on request (no need for PR)

diff --git a/.github/workflows/pre_merge.yml b/.github/workflows/pre_merge.yml
@@ -1,4 +1,5 @@
 name: Pre-Merge Checks
+permissions: read-all
 
 on:
   push:

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -1,4 +1,6 @@
 name: Upload Python Package
+permissions: read-all
+
 on:
   release:
     types: [published]

diff --git a/.github/workflows/upload_coverage.yml b/.github/workflows/upload_coverage.yml
@@ -1,4 +1,6 @@
 name: Upload coverage
+permissions: read-all
+
 on:
   workflow_run:
     workflows: ["Pre-Merge Checks"]