Skip to content

Y
yaml-cpp
Unverified Commit d7f672d1 by Diogo Teles Sant'Anna Committed by GitHub
Options

CI: define read-only permission for GitHub Workflow (#1175) 

It secures the repo against erroneous or malicious actions from external jobs you call from your workflow. It's specially important for the case they get compromised, for example.
parent bdc5582b
Showing with 1 additions and 0 deletions
.github/workflows/build.yml
...@@ -5,6 +5,7 @@ on: ...@@ -5,6 +5,7 @@ on:
pull_request: pull_request:
branches: [ master ] branches: [ master ]
workflow_dispatch: workflow_dispatch:
permissions: read-all
jobs: jobs:
cmake-build: cmake-build:
strategy: strategy:
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment