mirror of
https://github.com/prometheus/prometheus.git
synced 2025-03-05 20:59:13 -08:00
Merge pull request #11285 from ashishkurmi/main
ci: add minimum GitHub token permissions for workflows
This commit is contained in:
commit
e0502f00c8
3
.github/workflows/buf-lint.yml
vendored
3
.github/workflows/buf-lint.yml
vendored
|
@ -4,6 +4,9 @@ on:
|
|||
paths:
|
||||
- ".github/workflows/buf-lint.yml"
|
||||
- "**.proto"
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
buf:
|
||||
name: lint
|
||||
|
|
3
.github/workflows/buf.yml
vendored
3
.github/workflows/buf.yml
vendored
|
@ -3,6 +3,9 @@ on:
|
|||
push:
|
||||
branches:
|
||||
- main
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
buf:
|
||||
name: lint and publish
|
||||
|
|
4
.github/workflows/codeql-analysis.yml
vendored
4
.github/workflows/codeql-analysis.yml
vendored
|
@ -6,6 +6,10 @@ on:
|
|||
schedule:
|
||||
- cron: "26 14 * * 1"
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
security-events: write
|
||||
|
||||
jobs:
|
||||
analyze:
|
||||
name: Analyze
|
||||
|
|
3
.github/workflows/funcbench.yml
vendored
3
.github/workflows/funcbench.yml
vendored
|
@ -2,6 +2,9 @@ on:
|
|||
repository_dispatch:
|
||||
types: [funcbench_start]
|
||||
name: Funcbench Workflow
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
run_funcbench:
|
||||
name: Running funcbench
|
||||
|
|
3
.github/workflows/fuzzing.yml
vendored
3
.github/workflows/fuzzing.yml
vendored
|
@ -1,6 +1,9 @@
|
|||
name: CIFuzz
|
||||
on:
|
||||
workflow_call:
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
Fuzzing:
|
||||
runs-on: ubuntu-latest
|
||||
|
|
3
.github/workflows/repo_sync.yml
vendored
3
.github/workflows/repo_sync.yml
vendored
|
@ -3,6 +3,9 @@ name: Sync repo files
|
|||
on:
|
||||
schedule:
|
||||
- cron: '44 17 * * *'
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
repo_sync:
|
||||
runs-on: ubuntu-latest
|
||||
|
|
Loading…
Reference in a new issue