security: add permissions block to workflows (#2288)

Co-authored-by: Steve Gordon <sgordon@hotmail.co.uk>
elastic · Feb 19, 2024 · 2e1793a · 2e1793a
1 parent 53771b7
commit 2e1793a
Show file tree

Hide file tree

Showing 5 changed files with 15 additions and 0 deletions.
diff --git a/.github/workflows/addToProject.yml b/.github/workflows/addToProject.yml
@@ -9,6 +9,9 @@ on:
 env:
   MY_GITHUB_TOKEN: ${{ secrets.APM_TECH_USER_TOKEN }}
 
+permissions:
+  contents: read
+
 jobs:
   assign_one_project:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
@@ -5,6 +5,9 @@ on:
   pull_request_target:
     types: [opened]
 
+permissions:
+  contents: read
+
 jobs:
   triage:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/test-linux-reporter.yml b/.github/workflows/test-linux-reporter.yml
@@ -8,6 +8,9 @@ on:
     types:
       - completed
 
+permissions:
+  contents: read
+
 jobs:
   report:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/test-windows-iis-reporter.yml b/.github/workflows/test-windows-iis-reporter.yml
@@ -8,6 +8,9 @@ on:
     types:
       - completed
 
+permissions:
+  contents: read
+
 jobs:
   report:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/test-windows-reporter.yml b/.github/workflows/test-windows-reporter.yml
@@ -8,6 +8,9 @@ on:
     types:
       - completed
 
+permissions:
+  contents: read
+
 jobs:
   report:
     runs-on: ubuntu-latest