8000 Merge pull request #22367 from mattip/ci-permissions · numpy/numpy@737016f · GitHub
[go: up one dir, main page]
Skip to content

Commit 737016f

Browse files
charrischarris
authored
Merge pull request #22367 from mattip/ci-permissions
BUILD: add permissions to github actions
2 parents 3b6abec + 423368e commit 737016f

File tree

7 files changed

+22
-0
lines changed

7 files changed

+22
-0
lines changed

‎.github/workflows/build_test.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,9 @@ concurrency:
2222
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
2323
cancel-in-progress: true
2424

25+
permissions:
26+
contents: read # to fetch code (actions/checkout)
27+
2528
jobs:
2629
lint:
2730
if: "github.repository == 'numpy/numpy' && github.ref != 'refs/heads/main' && !contains(github.event.head_commit.message, '[ci skip]') && !contains(github.event.head_commit.message, '[skip ci]') && !contains(github.event.head_commit.message, '[skip github]')"

‎.github/workflows/circleci.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,10 @@
11
# To enable this workflow on a fork, comment out:
22
#
33
# if: github.repository == 'numpy/numpy'
4+
5+
permissions:
6+
contents: read # to fetch code (actions/checkout)
7+
48
on: [status]
59
jobs:
610
circleci_artifacts_redirector_job:

‎.github/workflows/cygwin.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,9 @@ concurrency:
1414
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
1515
cancel-in-progress: true
1616

17+
permissions:
18+
contents: read # to fetch code (actions/checkout)
19+
1720
jobs:
1821
cygwin_build_test:
1922
runs-on: windows-latest

‎.github/workflows/docker.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,9 @@ on:
77
paths:
88
- 'environment.yml'
99

10+
permissions:
11+
contents: read # to fetch code (actions/checkout)
12+
1013
jobs:
1114
build:
1215
name: Build base Docker image

‎.github/workflows/gitpod.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,9 @@ on:
55
branches:
66
- main
77

8+
permissions:
9+
contents: read # to fetch code (actions/checkout)
10+
811
jobs:
912
build:
1013
name: Build Gitpod Docker image

‎.github/workflows/labeler.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,9 @@ on:
33
pull_request_target:
44
types: [opened, synchronize, reopened, edited]
55

6+
permissions:
7+
contents: write # to add labels
8+
69
jobs:
710
pr-labeler:
811
runs-on: ubuntu-latest

‎.github/workflows/wheels.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,9 @@ concurrency:
3131
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
3232
cancel-in-progress: true
3333

34+
permissions:
35+
contents: read # to fetch code (actions/checkout)
36+
3437
jobs:
3538
get_commit_message:
3639
name: Get commit message

0 commit comments

Comments
 (0)
0