Browse Source
Adds explicit permissions to workflows
Specifies explicit permissions for GitHub Actions workflows to enhance security and control access to resources.
This ensures that each workflow only has the necessary permissions, following the principle of least privilege.
pull/4854/head
Daniel Gibbs
4 months ago
Failed to extract signature
8 changed files with
22 additions and
0 deletions
.github/workflows/add-to-project.yml
.github/workflows/details-check.yml
.github/workflows/git-sync.yml
.github/workflows/potential-duplicates.yml
.github/workflows/serverlist-validate.yml
.github/workflows/trigger-docker-build.yml
.github/workflows/update-check.yml
.github/workflows/update-copyright-years-in-license-file.yml
@ -5,6 +5,8 @@ on:
- opened
- opened
- labeled
- labeled
permissions : {}
jobs:
jobs:
add-to-project:
add-to-project:
if : github.repository_owner == 'GameServerManagers'
if : github.repository_owner == 'GameServerManagers'
@ -6,6 +6,9 @@ on:
branches:
branches:
- develop
- develop
permissions:
contents : read
concurrency:
concurrency:
group : details-check-${{ github.ref_name }}
group : details-check-${{ github.ref_name }}
cancel-in-progress : true
cancel-in-progress : true
@ -7,6 +7,8 @@ on:
- master
- master
- develop
- develop
permissions : {}
jobs:
jobs:
gitHub-to-bitbucket:
gitHub-to-bitbucket:
if : github.repository_owner == 'GameServerManagers'
if : github.repository_owner == 'GameServerManagers'
@ -3,6 +3,10 @@ on:
issues:
issues:
types:
types:
- opened
- opened
permissions:
issues : write
jobs:
jobs:
potential-duplicates:
potential-duplicates:
if : github.repository_owner == 'GameServerManagers'
if : github.repository_owner == 'GameServerManagers'
@ -3,6 +3,9 @@ on:
workflow_dispatch:
workflow_dispatch:
push:
push:
permissions:
contents : read
jobs:
jobs:
serverlist-validate:
serverlist-validate:
if : github.repository_owner == 'GameServerManagers'
if : github.repository_owner == 'GameServerManagers'
@ -6,6 +6,8 @@ on:
types:
types:
- published
- published
permissions : {}
jobs:
jobs:
trigger_build_docker-linuxgsm:
trigger_build_docker-linuxgsm:
if : github.repository_owner == 'GameServerManagers'
if : github.repository_owner == 'GameServerManagers'
@ -6,6 +6,8 @@ on:
branches:
branches:
- develop
- develop
permissions : {}
concurrency:
concurrency:
group : update-check-${{ github.ref_name }}
group : update-check-${{ github.ref_name }}
cancel-in-progress : true
cancel-in-progress : true
@ -4,6 +4,10 @@ on:
schedule:
schedule:
- cron : "0 3 1 1 *" # 03:00 AM on January 1
- cron : "0 3 1 1 *" # 03:00 AM on January 1
permissions:
contents : write
pull-requests : write
jobs:
jobs:
update-license-year:
update-license-year:
if : github.repository_owner == 'GameServerManagers'
if : github.repository_owner == 'GameServerManagers'