Skip to content

Commit 788bb22

Browse files
committed
fix(ci): add explicit permissions to lint.yml
CodeQL flagged lint.yml (actions/missing-workflow-permissions): no permissions block anywhere in the file, so it runs with whatever the repo's default token permissions are rather than what it actually needs. It only checks out and reads the repo -- contents: read covers everything the job does. Signed-off-by: Jimisola Laursen <jimisola@jimisola.com>
1 parent ca75cea commit 788bb22

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

.github/workflows/lint.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,9 @@ on:
33
workflow_dispatch:
44
workflow_call:
55

6+
permissions:
7+
contents: read
8+
69
jobs:
710
linting:
811
runs-on: ubuntu-latest

0 commit comments

Comments
 (0)