Harden GITHUB_TOKEN permissions

Signed-off-by: Craig Ingram <cjingram@google.com>
This commit is contained in:
Craig Ingram
2022-11-01 10:56:38 -04:00
parent 8167751f56
commit a270d6e8ae
11 changed files with 48 additions and 1 deletions

View File

@@ -28,6 +28,8 @@ env:
WEBSERVER_TESTING_IMAGE_REF: "k8s.gcr.io/e2e-test-images/nginx:1.14-2"
HCSSHIM_TAG: "master"
permissions: # added using https://github.com/step-security/secure-workflows
contents: read
jobs:
winIntegration: