Enes Cakir de5411cbd4 Set workflow job permissions explicitly ...

CodeQL has started scanning GitHub Actions workflows as well. It's not a
major issue, but it's good to follow best practices.

https://github.com/ubicloud/ubicloud/security/code-scanning/11

    Workflow does not contain permissions

    If a GitHub Actions job or workflow has no explicit permissions set,
    then the repository permissions are used. Repositories created under
    organizations inherit the organization permissions. The
    organizations or repositories created before February 2023 have the
    default permissions set to read-write. Often these permissions do
    not adhere to the principle of least privilege and can be reduced to
    read-only, leaving the write permission only to a specific types as
    issues: write or pull-requests: write.

2025-03-11 13:15:37 +03:00

1.3 KiB

Raw Permalink Blame History

View Raw