Harden GITHUB_TOKEN permissions
Signed-off-by: Craig Ingram <cjingram@google.com>
This commit is contained in:
4
.github/workflows/build-test-images.yml
vendored
4
.github/workflows/build-test-images.yml
vendored
@@ -20,7 +20,7 @@ on:
|
||||
default: westeurope
|
||||
|
||||
permissions:
|
||||
packages: write
|
||||
contents: read
|
||||
|
||||
env:
|
||||
AZURE_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUB_ID }}
|
||||
@@ -30,6 +30,8 @@ env:
|
||||
|
||||
jobs:
|
||||
images:
|
||||
permissions:
|
||||
packages: write
|
||||
name: "Build volume test images"
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 60
|
||||
|
||||
Reference in New Issue
Block a user