GitHub Workflows security hardening (#1180)

* build: harden golangci-lint.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>

* Update golangci-lint.yml

Signed-off-by: Alex <aleksandrosansan@gmail.com>

---------

Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
Alex 2023-05-17 11:39:40 +02:00 committed by GitHub
parent f51d823bda
commit 8b1a836e7d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions

View File

@ -10,8 +10,15 @@ on:
- ".golangci.yml" - ".golangci.yml"
pull_request: pull_request:
permissions:
contents: read # to fetch code (actions/checkout)
jobs: jobs:
golangci: golangci:
permissions:
contents: read # to fetch code (actions/checkout)
pull-requests: read # to fetch pull requests (golangci/golangci-lint-action)
name: lint name: lint
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps: