Fix workflows RBAC (#249)

* fix workflows RBAC * Update .github/workflows/datadog-static-analysis.yml Co-authored-by: Edouard Schweisguth <edouard.schweisguth@datadoghq.com> --------- Co-authored-by: Edouard Schweisguth <edouard.schweisguth@datadoghq.com>
DataDog · Aug 28, 2024 · fda64c8 · fda64c8
1 parent 7341940
commit fda64c8
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.github/workflows/datadog-static-analysis.yml b/.github/workflows/datadog-static-analysis.yml
@@ -4,7 +4,7 @@ on:
   push:
 
 permissions:
-  contents: write
+  contents: write # write permission is needed to get access to the DD_API_KEY secret - https://docs.github.com/en/actions/security-for-github-actions/security-guides/using-secrets-in-github-actions#accessing-your-secrets
 
 jobs:
   static-analysis:

diff --git a/.github/workflows/system-test.yml b/.github/workflows/system-test.yml
@@ -6,6 +6,9 @@ on:
       - main
   pull_request:
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   system-test:
     runs-on: