mirror of
https://github.com/edera-dev/sprout.git
synced 2025-12-19 19:00:18 +00:00
fix more zizmor warnings
This commit is contained in:
11
.github/workflows/ci-actions.yaml
vendored
11
.github/workflows/ci-actions.yaml
vendored
@@ -7,19 +7,16 @@ on:
|
|||||||
branches: ["**"]
|
branches: ["**"]
|
||||||
|
|
||||||
permissions:
|
permissions:
|
||||||
contents: read
|
contents: read # Needed to checkout the repository.
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
zizmor:
|
zizmor:
|
||||||
name: zizmor
|
name: zizmor
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
permissions:
|
permissions:
|
||||||
# write is needed to upload security events to GitHub code scanning.
|
security-events: write # Needed to upload code scanning results.
|
||||||
security-events: write
|
contents: read # Needed to checkout the repository.
|
||||||
# we only need to read the contents of the repository.
|
actions: read # Needed to analyze action metadata.
|
||||||
contents: read
|
|
||||||
# we only need to read the action metadata.
|
|
||||||
actions: read
|
|
||||||
steps:
|
steps:
|
||||||
- name: harden runner
|
- name: harden runner
|
||||||
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
|
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
|
||||||
|
|||||||
3
.github/workflows/ci-code.yaml
vendored
3
.github/workflows/ci-code.yaml
vendored
@@ -9,8 +9,7 @@ on:
|
|||||||
- main
|
- main
|
||||||
|
|
||||||
permissions:
|
permissions:
|
||||||
# we only need to read the contents of the repository.
|
contents: read # Needed to checkout the repository.
|
||||||
contents: read
|
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
rustfmt:
|
rustfmt:
|
||||||
|
|||||||
5
.github/workflows/release-assets.yaml
vendored
5
.github/workflows/release-assets.yaml
vendored
@@ -6,14 +6,13 @@ on:
|
|||||||
- created
|
- created
|
||||||
|
|
||||||
permissions:
|
permissions:
|
||||||
contents: read
|
contents: read # Needed to checkout the repository.
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
assets:
|
assets:
|
||||||
name: assets
|
name: assets
|
||||||
permissions:
|
permissions:
|
||||||
# write is needed to upload release artifacts.
|
contents: write # Needed to upload release assets.
|
||||||
contents: write
|
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: harden runner
|
- name: harden runner
|
||||||
|
|||||||
Reference in New Issue
Block a user