security: add permissions block to workflows (#1575)

* security: add permissions block to workflows * Update .github/workflows/labeler.yml * security: add permissions block to workflows * Update .github/workflows/snapshoty.yml --------- Co-authored-by: Damien Mathieu <[email protected]>
elastic · Mar 12, 2024 · 699e8df · 699e8df
1 parent d6938d4
commit 699e8df
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 0 deletions.
diff --git a/.github/workflows/addToAPMProject.yml b/.github/workflows/addToAPMProject.yml
@@ -3,6 +3,9 @@ on:
   issues:
     types:
       - opened
+permissions:
+  contents: read
+
 jobs:
   add_to_project:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
@@ -5,6 +5,10 @@ on:
   pull_request_target:
     types: [opened]
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
   triage:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/snapshoty.yml b/.github/workflows/snapshoty.yml
@@ -12,6 +12,9 @@ on:
     - '*.asciidoc'
     - 'docs/**'
 
+permissions:
+  contents: read
+
 jobs:
   upload:
     runs-on: ubuntu-latest