From eaf0d154849c5bfdc09f31e66e42b01bebca882f Mon Sep 17 00:00:00 2001 From: Zhiwei Liang Date: Tue, 21 Jul 2026 18:00:31 -0400 Subject: [PATCH] Add explicit workflow permissions --- .github/workflows/build-test.yml | 3 +++ .github/workflows/labeler.yml | 4 ++++ .github/workflows/release.yml | 3 +++ 3 files changed, 10 insertions(+) diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml index 9bfc9be..e8c0b3d 100644 --- a/.github/workflows/build-test.yml +++ b/.github/workflows/build-test.yml @@ -9,6 +9,9 @@ on: branches: - main +permissions: + contents: read + jobs: build: strategy: diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 394ec5d..5a9baa2 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -12,6 +12,10 @@ on: - '.github/labels.yml' - '.github/workflows/labeler.yml' +permissions: + contents: read + issues: write + jobs: labeler: runs-on: ubuntu-latest diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f0a118e..869ee56 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -4,6 +4,9 @@ on: release: types: [ published ] +permissions: + contents: write + jobs: goreleaser: runs-on: ubuntu-latest