Harden GITHUB_TOKEN permissions

Signed-off-by: Craig Ingram <cjingram@google.com>
This commit is contained in:
Craig Ingram
2022-11-01 10:56:38 -04:00
parent 8167751f56
commit a270d6e8ae
11 changed files with 48 additions and 1 deletions

View File

@@ -1,5 +1,8 @@
name: Fuzzing
on: [pull_request]
permissions: # added using https://github.com/step-security/secure-workflows
contents: read
jobs:
# Run all fuzzing tests. Some of them use Go 1.18's testing.F.
# Others use https://github.com/AdaLogics/go-fuzz-headers.