summaryrefslogtreecommitdiffstats
path: root/.github/workflows/coveralls.yml
diff options
context:
space:
mode:
authorVarun Sharma <varunsh@stepsecurity.io>2022-07-09 07:03:23 -0700
committerPauli <pauli@openssl.org>2022-07-13 10:14:09 +1000
commitc6e7f427c82dfa17416a39af7661c40162d57aaf (patch)
tree58c7246295cbe2773db5e97e758ea2a0d2152bb6 /.github/workflows/coveralls.yml
parent6d594fdf52c4824acff9a1e50e2e2ea576a64fd1 (diff)
ci: add GitHub token permissions for workflows
Signed-off-by: Varun Sharma <varunsh@stepsecurity.io> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/18766)
Diffstat (limited to '.github/workflows/coveralls.yml')
-rw-r--r--.github/workflows/coveralls.yml6
1 files changed, 6 insertions, 0 deletions
diff --git a/.github/workflows/coveralls.yml b/.github/workflows/coveralls.yml
index c23df85acf..ec1367d829 100644
--- a/.github/workflows/coveralls.yml
+++ b/.github/workflows/coveralls.yml
@@ -12,8 +12,14 @@ on:
schedule:
- cron: '49 0 * * *'
+permissions:
+ contents: read
+
jobs:
coverage:
+ permissions:
+ checks: write # for coverallsapp/github-action to create new checks
+ contents: read # for actions/checkout to fetch code
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2