ci: Run pull_request_target workflows with no permisisons

The MSHV tests need access to secrets so that they can run workloads in
Azure.  It does not need privileged access to GitHub.  Ensure its
GITHUB_TOKEN has no permissions.

Signed-off-by: Demi Marie Obenour <demiobenour@gmail.com>
This commit is contained in:
Demi Marie Obenour
2026-03-28 12:55:09 -04:00
committed by Bo Chen
parent ea0a0393b5
commit 9b9950335f

View File

@@ -1,5 +1,6 @@
name: Cloud Hypervisor Tests (MSHV) (x86_64)
on: [pull_request_target, merge_group]
permissions: {}
jobs:
infra-setup: