From 156678de7f54b1059abdfa74fbf5d2cd23ecf36d Mon Sep 17 00:00:00 2001 From: Chris Siefert Date: Thu, 10 Oct 2024 17:49:53 -0600 Subject: [PATCH] Github Actions: Fixing AT2 Permissions (#13515) Trying to make the OpenSSF scorecard happy Signed-off-by: Chris Siefert --- .github/workflows/AT2.yml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/AT2.yml b/.github/workflows/AT2.yml index cbb0b653bc4e..99c5dc2654fc 100644 --- a/.github/workflows/AT2.yml +++ b/.github/workflows/AT2.yml @@ -13,15 +13,17 @@ on: - develop workflow_dispatch: -# actions: write needed by skip-duplicate-actions -permissions: - actions: write +# actions: write needed by skip-duplicate-actions (handled below as per OpenSSF scorecard) +permissions: contents: read jobs: # Jobs depend on the output of pre-checks to run pre-checks: runs-on: ubuntu-latest + # actions: write needed by skip-duplicate-actions + permissions: + actions: write outputs: should_skip: ${{ steps.skip_check.outputs.should_skip }} steps: