Skip to content

Commit a43d2a1

Browse files
authored
[TPDMDEV-798] Improve Workflow Permissions (#100)
* Improve Workflow Permissions * removed redundant read permissions
1 parent ef1d1ad commit a43d2a1

File tree

2 files changed

+4
-2
lines changed

2 files changed

+4
-2
lines changed

.github/workflows/Dependencies Security Scan.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,8 @@ on:
77
paths:
88
- 'src/**'
99

10+
permissions: read-all
11+
1012
jobs:
1113
scan-actions:
1214
name: Scan Actions
@@ -16,8 +18,6 @@ jobs:
1618
name: Analyze Code Dependencies
1719
runs-on: ubuntu-latest
1820
permissions:
19-
actions: read
20-
contents: read
2121
security-events: write
2222

2323
strategy:

.github/workflows/build-model.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,8 @@ on:
1818
description: "ed_fi_model_ref: The reference name from the Ed-Fi Model repo to pull. Default: DS-5.1-ME-3.x"
1919
pull_request:
2020

21+
permissions: read-all
22+
2123
env:
2224
data_model_version: "5.1.0"
2325
ODS_version: "7.2"

0 commit comments

Comments
 (0)