summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorLinus Färnstrand <linus@mullvad.net>2024-07-25 12:33:35 +0200
committerLinus Färnstrand <linus@mullvad.net>2024-07-25 12:33:35 +0200
commita1f1734834e6e490a2274984e1f6bd2fa4e9f577 (patch)
treec5f177b18a18afab7a60757ac695dcdbb06b9042
parent20522ed20a8cd25c4db4d4caa91d314ff7c310db (diff)
parent177700523ad61265540feff4b7193fc769f0e99d (diff)
downloadmullvadvpn-a1f1734834e6e490a2274984e1f6bd2fa4e9f577.tar.xz
mullvadvpn-a1f1734834e6e490a2274984e1f6bd2fa4e9f577.zip
Merge branch 'add-github-actions-permissions'
-rw-r--r--.github/workflows/check-changelog.yml4
-rw-r--r--.github/workflows/git-commit-message-style.yml2
-rw-r--r--.github/workflows/shellcheck.yml2
-rw-r--r--.github/workflows/unicode-check.yml3
-rw-r--r--.github/workflows/verify-locked-down-signatures.yml3
-rw-r--r--.github/workflows/yamllint.yml3
6 files changed, 17 insertions, 0 deletions
diff --git a/.github/workflows/check-changelog.yml b/.github/workflows/check-changelog.yml
index 8925a21074..e6205bde7f 100644
--- a/.github/workflows/check-changelog.yml
+++ b/.github/workflows/check-changelog.yml
@@ -3,9 +3,13 @@ name: Check changelog format
on:
pull_request:
paths:
+ - .github/workflows/check-changelog.yml
- 'CHANGELOG.md'
- 'ios/CHANGELOG.md'
- 'android/CHANGELOG.md'
+
+permissions: {}
+
env:
LINE_LIMIT: 100
jobs:
diff --git a/.github/workflows/git-commit-message-style.yml b/.github/workflows/git-commit-message-style.yml
index 0d53849f50..7cb2d03765 100644
--- a/.github/workflows/git-commit-message-style.yml
+++ b/.github/workflows/git-commit-message-style.yml
@@ -4,6 +4,8 @@ on:
push:
workflow_dispatch:
+permissions: {}
+
jobs:
check-commit-message-style:
name: Check commit message style
diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml
index 7bf0f78da3..a0fe536d17 100644
--- a/.github/workflows/shellcheck.yml
+++ b/.github/workflows/shellcheck.yml
@@ -4,6 +4,8 @@ on:
pull_request:
workflow_dispatch:
+permissions: {}
+
jobs:
shellcheck:
name: Shellcheck
diff --git a/.github/workflows/unicode-check.yml b/.github/workflows/unicode-check.yml
index d6f13d05cf..09b9d8e26e 100644
--- a/.github/workflows/unicode-check.yml
+++ b/.github/workflows/unicode-check.yml
@@ -1,6 +1,9 @@
---
name: Bidirectional Unicode scan
on: [pull_request, workflow_dispatch]
+
+permissions: {}
+
jobs:
build-linux:
runs-on: ubuntu-latest
diff --git a/.github/workflows/verify-locked-down-signatures.yml b/.github/workflows/verify-locked-down-signatures.yml
index 362a57d91e..12d4ab3068 100644
--- a/.github/workflows/verify-locked-down-signatures.yml
+++ b/.github/workflows/verify-locked-down-signatures.yml
@@ -26,6 +26,9 @@ on:
- building/linux-container-image.txt
- building/android-container-image.txt
- building/sigstore/**
+
+permissions: {}
+
jobs:
verify-signatures:
runs-on: ubuntu-latest
diff --git a/.github/workflows/yamllint.yml b/.github/workflows/yamllint.yml
index 8ff2e5a498..a23163a311 100644
--- a/.github/workflows/yamllint.yml
+++ b/.github/workflows/yamllint.yml
@@ -8,6 +8,9 @@ on:
- '**/**.yml'
- '**/**.yaml'
workflow_dispatch:
+
+permissions: {}
+
jobs:
check-formatting:
runs-on: ubuntu-latest