T6349: updated pr-labels workflow permission, and removed unused import

vyos · May 18, 2024 · 9b29a34 · 9b29a34
1 parent c586b5b
commit 9b29a34
Show file tree

Hide file tree

Showing 8 changed files with 19 additions and 1 deletion.
diff --git a/.github/workflows/add-pr-labels.yml b/.github/workflows/add-pr-labels.yml
@@ -11,6 +11,7 @@ on:
 
 permissions:
   pull-requests: write
+  contents: read
 
 jobs:
   add-pr-label:

diff --git a/.github/workflows/auto-author-assign.yml b/.github/workflows/auto-author-assign.yml
@@ -3,8 +3,10 @@ on:
   pull_request_target:
     types: [opened, reopened, ready_for_review, locked]
 
+
 permissions:
   pull-requests: write
+  contents: read
 
 jobs:
   assign-author:

diff --git a/.github/workflows/chceck-pr-message.yml b/.github/workflows/chceck-pr-message.yml
@@ -8,6 +8,10 @@ on:
       - crux
       - equuleus
 
+permissions:
+  pull-requests: write
+  contents: read
+
 jobs:
   check-pr-title:
     uses: vyos/.github/.github/workflows/check-pr-message.yml@feature/T6349-reusable-workflows

diff --git a/.github/workflows/check-pr-conflicts.yml b/.github/workflows/check-pr-conflicts.yml
@@ -6,6 +6,7 @@ on:
 
 permissions:
   pull-requests: write
+  contents: read
 
 jobs:
   check-pr-conflict-call:

diff --git a/.github/workflows/check-stale.yml b/.github/workflows/check-stale.yml
@@ -5,6 +5,7 @@ on:
 
 permissions:
   pull-requests: write
+  contents: read
 
 jobs:
   stale:

diff --git a/.github/workflows/check-unused-imports.yml b/.github/workflows/check-unused-imports.yml
@@ -6,6 +6,10 @@ on:
       - sagitta
   workflow_dispatch:
 
+permissions:
+  pull-requests: write
+  contents: read
+
 jobs:
   check-unused-imports:
     uses: vyos/.github/.github/workflows/check-unused-imports.yml@feature/T6349-reusable-workflows

diff --git a/.github/workflows/label-backport.yml b/.github/workflows/label-backport.yml
@@ -3,7 +3,8 @@ name: Mergifyio backport
 on: [issue_comment]
 
 permissions:
-    pull-requests: write
+  pull-requests: write
+  contents: read
 
 jobs:
   mergifyio-backport:

diff --git a/.github/workflows/linit-j2.yml b/.github/workflows/linit-j2.yml
@@ -8,6 +8,10 @@ on:
       - crux
       - equuleus
 
+permissions:
+  pull-requests: write
+  contents: read
+
 jobs:
   j2lint:
     uses: vyos/.github/.github/workflows/lint-j2.yml@feature/T6349-reusable-workflows
-Original file line number
+Diff line change
@@ Expand Up / @@ -5,6 +5,7 @@ on: @@
     permissions:
       pull-requests: write
+      contents: read
     jobs:
       stale:
@@ Expand Down @@