Harden GITHUB_TOKEN permissions

Signed-off-by: Craig Ingram <cjingram@google.com>
This commit is contained in:
Craig Ingram
2022-11-01 10:56:38 -04:00
parent 8167751f56
commit a270d6e8ae
11 changed files with 48 additions and 1 deletions

View File

@@ -27,6 +27,8 @@ env:
RESOURCE_CONSUMER_TESTING_IMAGE_REF: "registry.k8s.io/e2e-test-images/resource-consumer:1.10"
WEBSERVER_TESTING_IMAGE_REF: "registry.k8s.io/e2e-test-images/nginx:1.14-2"
permissions: # added using https://github.com/step-security/secure-workflows
contents: read
jobs:
winIntegration: