Skip to content

Commit 4d9d243

Browse files
authored
Merge pull request #2 from labelzoom/alert-autofix-4
Potential fix for code scanning alert no. 4: Workflow does not contain permissions
2 parents b649d3b + db285f5 commit 4d9d243

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

.github/workflows/deploy.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,9 @@ on:
77
release:
88
types: [created]
99

10+
permissions:
11+
contents: read
12+
1013
jobs:
1114
test:
1215
runs-on: ubuntu-latest
@@ -35,6 +38,9 @@ jobs:
3538
if: github.event_name == 'push'
3639
name: Deploy to Beta
3740
environment: beta
41+
permissions:
42+
contents: read
43+
deployments: write
3844
steps:
3945
- uses: actions/checkout@v4
4046
- name: Deploy
@@ -51,6 +57,9 @@ jobs:
5157
matrix:
5258
environment: ['public', 'eus1', 'eus2']
5359
environment: ${{ matrix.environment }}
60+
permissions:
61+
contents: read
62+
deployments: write
5463
steps:
5564
- uses: actions/checkout@v4
5665
- name: Deploy

0 commit comments

Comments
 (0)