ci: Updating workflow permissions as per step-security recommendation…

…s. (#16036) Signed-off-by: Vasil Boyadzhiev <[email protected]>
hashgraph · Oct 22, 2024 · 11f878c · 11f878c
1 parent c97317a
commit 11f878c
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/node-zxcron-release-fsts-regression.yaml b/.github/workflows/node-zxcron-release-fsts-regression.yaml
@@ -25,6 +25,9 @@ defaults:
 env:
   BRANCH_LIST_FILE: "${{ github.workspace }}/branches.lst"
 
+permissions:
+  contents: read
+
 jobs:
   cron:
     name: Cron / Launch Workflows

diff --git a/.github/workflows/node-zxf-deploy-integration.yaml b/.github/workflows/node-zxf-deploy-integration.yaml
@@ -26,6 +26,9 @@ on:
     branches:
       - develop
 
+permissions:
+  contents: read
+
 jobs:
   jenkins-checks:
     name: Build Artifact

diff --git a/.github/workflows/platform-zxc-launch-jrs-workflow.yaml b/.github/workflows/platform-zxc-launch-jrs-workflow.yaml
@@ -43,6 +43,9 @@ on:
         description: "The Github access token used to checkout the repository, submodules, and make GitHub API calls."
         required: true
 
+permissions:
+  contents: read
+
 defaults:
   run:
     shell: bash

diff --git a/.github/workflows/platform-zxcron-release-jrs-regression.yaml b/.github/workflows/platform-zxcron-release-jrs-regression.yaml
@@ -20,6 +20,9 @@ on:
     - cron: '0 9 * * *'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 defaults:
   run:
     shell: bash