permissions

Author: Leah Restad

.github/workflows/check-license-headers.yml

@@ -9,6 +9,9 @@ on:
     branches: [main]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   check-license:
     runs-on: ubuntu-latest

.github/workflows/test-dotnet.yml

@@ -12,6 +12,9 @@ on:
       - ".github/workflows/test-dotnet.yml"
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: windows-latest

.github/workflows/test-nodejs.yml

@@ -1,7 +1,7 @@
 # Copyright (c) Microsoft Corporation.
 # Licensed under the MIT License.
 
-name: Run NodeJS Tests
+name: Run Node.js Tests
 
 on:
   pull_request:
@@ -12,6 +12,9 @@ on:
       - ".github/workflows/test-nodejs.yml"
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/update-domains.yml

@@ -5,18 +5,17 @@ name: Verify Azure Service Domains
 
 on:
   pull_request:
+    branches:
+      - main
     paths:
       - 'config/Domains.json'
       - 'nodejs/src/Helpers/Domains.ts'
       - 'dotnet/src/Helpers/Domains.cs'
-  push:
-    branches: [main]
-    paths:
-      - 'config/Domains.json'
-      - 'nodejs/src/Helpers/Domains.ts'  
-      - 'dotnet/src/Helpers/Domains.cs'
   workflow_dispatch: # Allow manual triggering
 
+permissions:
+  contents: read
+
 jobs:
   verify-domains:
     runs-on: ubuntu-latest

.github/workflows/update-ip-ranges.yml

@@ -13,6 +13,9 @@ on:
       - 'dotnet/src/IPAddressRanges.cs'
   workflow_dispatch: # Allow manual triggering
 
+permissions:
+  contents: read
+
 jobs:
   verify-ranges:
     runs-on: ubuntu-latest