fix: limit permissions for github workflows (#395)

* fix: limit permissions for github workflows * fix: removed unnecessary actions read perm
opengovsg · Jan 9, 2025 · 2f3cc3a · 2f3cc3a · vercel · Jan 9, 2025
1 parent 594f0ba
commit 2f3cc3a
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/.github/workflows/chromatic.yml b/.github/workflows/chromatic.yml
@@ -14,6 +14,9 @@ on:
 # List of jobs
 jobs:
   chromatic-deployment:
+    permissions:
+      contents: read
+      checks: write
     # Operating System
     runs-on: ubuntu-latest
     env:

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -10,6 +10,10 @@ on:
   pull_request:
     types: [opened, synchronize]
 
+permissions:
+  contents: read
+  checks: write
+
 jobs:
   install:
     name: Install dependencies
@@ -66,6 +70,10 @@ jobs:
       - install
     timeout-minutes: 15
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: write
+      checks: write
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/setup