feat: reduce main branch, multi OS unit tests, and integration tests'…

… jobs to right permissions
DataDog · Sep 9, 2024 · 32887a0 · 32887a0
1 parent cc1e82e
commit 32887a0
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 0 deletions.
diff --git a/.github/workflows/main-branch-tests.yml b/.github/workflows/main-branch-tests.yml
@@ -11,6 +11,7 @@ on:
     branches:
       - main
       - release-v*
+      - dario.castane/VULN-8316/insecure-default-workflow-permissions
     tags:
       - "**"
 

diff --git a/.github/workflows/multios-unit-tests.yml b/.github/workflows/multios-unit-tests.yml
@@ -29,6 +29,9 @@ on:
 env:
   DD_APPSEC_WAF_TIMEOUT: 1m # Increase time WAF time budget to reduce CI flakiness
 
+permissions:
+  contents: read
+
 jobs:
   test-multi-os:
     runs-on: "${{ inputs.runs-on }}"

diff --git a/.github/workflows/unit-integration-tests.yml b/.github/workflows/unit-integration-tests.yml
@@ -20,6 +20,9 @@ env:
   # without having to download a newer one.
   GOTOOLCHAIN: local
 
+permissions:
+  contents: read
+
 jobs:
   copyright:
     runs-on: ubuntu-latest
-Original file line number
+Diff line change
@@ Expand Up / @@ -11,6 +11,7 @@ on: @@
         branches:
           - main
           - release-v*
+          - dario.castane/VULN-8316/insecure-default-workflow-permissions
         tags:
           - "**"
@@ Expand Down @@