aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Cleberg <[email protected]>2026-07-15 12:03:47 -0500
committerChristian Cleberg <[email protected]>2026-07-15 12:03:47 -0500
commitb70d3dd588c8f9d6c9ed0ff111af06b76fa1f6ba (patch)
tree0d245f01ac2120fe25af22c6d2209d6e70364825
parent7ffcbb88ad9dceb6a1258b64df90a9e5cf1793bf (diff)
downloaddevianter-b70d3dd588c8f9d6c9ed0ff111af06b76fa1f6ba.tar.gz
devianter-b70d3dd588c8f9d6c9ed0ff111af06b76fa1f6ba.tar.bz2
devianter-b70d3dd588c8f9d6c9ed0ff111af06b76fa1f6ba.zip
fix codeql findings
-rw-r--r--.github/workflows/ci.yml3
-rw-r--r--.github/workflows/go.yml3
-rw-r--r--.github/workflows/release.yml3
3 files changed, 9 insertions, 0 deletions
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 82ca511..a6a11dc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,6 +8,9 @@ on:
branches:
- main
+permissions:
+ contents: read
+
jobs:
test:
name: Test
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index d01073e..86abc7d 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -6,6 +6,9 @@ on:
pull_request:
branches: [ "main" ]
+permissions:
+ contents: read
+
jobs:
build:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a936364..7958b45 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,6 +5,9 @@ on:
tags:
- 'v*'
+permissions:
+ contents: write
+
jobs:
release:
runs-on: ubuntu-latest