Browse Source

Adds explicit permissions to workflows

Specifies explicit permissions for GitHub Actions workflows to enhance security and control access to resources.

This ensures that each workflow only has the necessary permissions, following the principle of least privilege.
pull/4854/head
Daniel Gibbs 4 months ago
parent
commit
61d335fd86
Failed to extract signature
  1. 2
      .github/workflows/add-to-project.yml
  2. 3
      .github/workflows/details-check.yml
  3. 2
      .github/workflows/git-sync.yml
  4. 4
      .github/workflows/potential-duplicates.yml
  5. 3
      .github/workflows/serverlist-validate.yml
  6. 2
      .github/workflows/trigger-docker-build.yml
  7. 2
      .github/workflows/update-check.yml
  8. 4
      .github/workflows/update-copyright-years-in-license-file.yml

2
.github/workflows/add-to-project.yml

@ -5,6 +5,8 @@ on:
- opened
- labeled
permissions: {}
jobs:
add-to-project:
if: github.repository_owner == 'GameServerManagers'

3
.github/workflows/details-check.yml

@ -6,6 +6,9 @@ on:
branches:
- develop
permissions:
contents: read
concurrency:
group: details-check-${{ github.ref_name }}
cancel-in-progress: true

2
.github/workflows/git-sync.yml

@ -7,6 +7,8 @@ on:
- master
- develop
permissions: {}
jobs:
gitHub-to-bitbucket:
if: github.repository_owner == 'GameServerManagers'

4
.github/workflows/potential-duplicates.yml

@ -3,6 +3,10 @@ on:
issues:
types:
- opened
permissions:
issues: write
jobs:
potential-duplicates:
if: github.repository_owner == 'GameServerManagers'

3
.github/workflows/serverlist-validate.yml

@ -3,6 +3,9 @@ on:
workflow_dispatch:
push:
permissions:
contents: read
jobs:
serverlist-validate:
if: github.repository_owner == 'GameServerManagers'

2
.github/workflows/trigger-docker-build.yml

@ -6,6 +6,8 @@ on:
types:
- published
permissions: {}
jobs:
trigger_build_docker-linuxgsm:
if: github.repository_owner == 'GameServerManagers'

2
.github/workflows/update-check.yml

@ -6,6 +6,8 @@ on:
branches:
- develop
permissions: {}
concurrency:
group: update-check-${{ github.ref_name }}
cancel-in-progress: true

4
.github/workflows/update-copyright-years-in-license-file.yml

@ -4,6 +4,10 @@ on:
schedule:
- cron: "0 3 1 1 *" # 03:00 AM on January 1
permissions:
contents: write
pull-requests: write
jobs:
update-license-year:
if: github.repository_owner == 'GameServerManagers'

Loading…
Cancel
Save