security: add permissions block to workflows (#227)

elastic · Mar 13, 2024 · ec9d6bd · ec9d6bd
1 parent 0e072ce
commit ec9d6bd
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/add-to-apm-project.yaml b/.github/workflows/add-to-apm-project.yaml
@@ -3,6 +3,9 @@ on:
   issues:
     types:
       - opened
+permissions:
+  contents: read
+
 jobs:
   add_to_project:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/add-to-project.yaml b/.github/workflows/add-to-project.yaml
@@ -6,6 +6,9 @@ on:
       - opened
       - transferred
 
+permissions:
+  contents: read
+
 jobs:
   add-to-project:
     name: Add issue to project

diff --git a/.github/workflows/label-elastic-pull-requests.yml b/.github/workflows/label-elastic-pull-requests.yml
@@ -4,6 +4,9 @@ on:
   pull_request_target:
     types: [opened]
 
+permissions:
+  contents: read
+
 jobs:
   safe-to-test:
     runs-on: ubuntu-latest