Restrict permissions for the GITHUB_TOKEN in .github/workflows/deploy-doghouse.yml
@@ -7,6 +7,8 @@ on:
jobs:
test:
+ permissions:
+ contents: read
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
@@ -17,6 +19,8 @@ jobs:
go-version: 1.15
- run: go test -v -race ./...
deploy:
+ permissions:
+ contents: read
needs: [test]
runs-on: ubuntu-latest
defaults:
