CI: GitHub Workflows security hardening (#3377)

Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
Alex 2022-09-26 12:25:49 +02:00 committed by GitHub
parent d1004eed02
commit 32a22b5420
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 8 additions and 0 deletions

View File

@ -2,8 +2,11 @@ name: CI (MacStadium)
on: on:
- push - push
- pull_request - pull_request
permissions: {}
jobs: jobs:
CI: CI:
permissions:
contents: write # for npx prebuild to make release
runs-on: macos-m1 runs-on: macos-m1
strategy: strategy:
fail-fast: false fail-fast: false

View File

@ -2,8 +2,13 @@ name: CI (GitHub)
on: on:
- push - push
- pull_request - pull_request
permissions: {}
jobs: jobs:
CI: CI:
permissions:
contents: write # for npx prebuild to make release
checks: write # to create new checks (coverallsapp/github-action)
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
container: ${{ matrix.container }} container: ${{ matrix.container }}
strategy: strategy: