Re: [PATCH 1/2] CI: Add `permissions` to GitHub Actions

2021-10-17 Thread Willy Tarreau
On Sat, Oct 16, 2021 at 06:10:26PM +0200, Tim Duesterhus wrote: > This change locks down the permissions of the access token in GitHub Actions > to > only allow reading the repository contents and nothing else. (...) This series and the coccinelle one applied, thanks Tim! Willy

[PATCH 1/2] CI: Add `permissions` to GitHub Actions

2021-10-16 Thread Tim Duesterhus
This change locks down the permissions of the access token in GitHub Actions to only allow reading the repository contents and nothing else. see https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token --- .github/workflows/codespell.yml