From: Tim Düsterhus <duesterhus@woltlab.com>
Date: Tue, 12 Oct 2021 12:15:54 +0000 (+0200)
Subject: Add `permissions` to GitHub Action Workflows
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=c8b13189ed8168072a36fbefca90630236bca0ca;p=GitHub%2FWoltLab%2Fblacklist.git

Add `permissions` to GitHub Action Workflows
---

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4ce1db3..3ee4204 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,9 @@ on:
   schedule:
   - cron: '0 0 1 * *'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index 1651000..baf574a 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -3,6 +3,10 @@ on:
   push:
     branches:
       - master
+
+permissions:
+  contents: read
+
 jobs:
   push_to_registry:
     name: Push Docker image to ghcr.io