ci: declare read-only permissions in ci and dependency-review workflows (#17)

This commit is contained in:
Adam Moussa 2026-07-29 11:41:20 -04:00 • committed by GitHub
parent 2580eed3b4
commit c071c5cc17
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 8 additions and 0 deletions

View file

@ -2,6 +2,10 @@ name: CI
on: on:
pull_request: pull_request:
branches: [main] branches: [main]
permissions:
contents: read
jobs: jobs:
ci: ci:
uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml@3f746774229d41770727e2e4fd63ed5f5555a8b3 # v1.0.3 uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml@3f746774229d41770727e2e4fd63ed5f5555a8b3 # v1.0.3

View file

@ -1,6 +1,10 @@
name: Dependency Review name: Dependency Review
on: on:
pull_request: pull_request:
permissions:
contents: read
jobs: jobs:
review: review:
uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@3f746774229d41770727e2e4fd63ed5f5555a8b3 # v1.0.3 uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@3f746774229d41770727e2e4fd63ed5f5555a8b3 # v1.0.3