Merge pull request #65 from MagmaWorks/task/action-security

Actions security
MagmaWorks · Dec 18, 2024 · 10487af · 10487af
2 parents cf178e8 + c39b98c
commit 10487af
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 0 deletions.
diff --git a/.github/workflows/on-merge-to-main.yml b/.github/workflows/on-merge-to-main.yml
@@ -8,3 +8,7 @@ on:
 jobs:
   ci:
     uses: magmaworks/actions/.github/workflows/on-merge-to-main.yml@main
+    permissions:
+        contents: write
+        actions: write
+        attestations: write
diff --git a/.github/workflows/on-pull-request.yml b/.github/workflows/on-pull-request.yml
@@ -9,3 +9,5 @@ on:
 jobs:
   ci:
     uses: magmaworks/actions/.github/workflows/on-pull-request.yml@main
+    permissions:
+      checks: write
diff --git a/.github/workflows/on-release.yml b/.github/workflows/on-release.yml
@@ -8,3 +8,7 @@ jobs:
   ci:
     uses: magmaworks/actions/.github/workflows/on-release.yml@main
     secrets: inherit
+    permissions:
+        contents: write
+        actions: write
+        attestations: write