chore(ci): tighten workflow permissions (#2280)

bcgov · Feb 18, 2025 · 21cfed0 · 21cfed0
1 parent 26e386a
commit 21cfed0
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 0 deletions.
diff --git a/.github/workflows/.deployer-db.yml b/.github/workflows/.deployer-db.yml
@@ -55,6 +55,9 @@ on:
       s3_endpoint:
         description: S3 endpoint
         required: false
+
+permissions: {}
+
 jobs:
   deploy_db:
     runs-on: ubuntu-24.04

diff --git a/.github/workflows/.deployer.yml b/.github/workflows/.deployer.yml
@@ -71,6 +71,8 @@ on:
         description: OpenShift token
         required: true
 
+permissions: {}
+
 jobs:
   deployer-db:
     name: Database

diff --git a/.github/workflows/.tests.yml b/.github/workflows/.tests.yml
@@ -13,6 +13,9 @@ env:
   DOMAIN: apps.silver.devops.gov.bc.ca
   PREFIX: ${{ github.event.repository.name }}-${{ inputs.target }}
 
+
+permissions: {}
+
 jobs:
   integration-tests:
     name: Integration

diff --git a/.github/workflows/scheduled.yml b/.github/workflows/scheduled.yml
@@ -9,6 +9,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   ageOutPRs:
     name: PR Deployment Purge