Restricting permissions to read on top level

Signed-off-by: Roshan Khatri <[email protected]>
roshkhatri · Apr 16, 2024 · 2631109 · 2631109
1 parent e646d29
commit 2631109
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/.github/workflows/call-build-linux-arm-packages.yml b/.github/workflows/call-build-linux-arm-packages.yml
@@ -29,13 +29,14 @@ on:
         description: The S3 secret access key for the bucket.
         required: false
 
+permissions:
+  contents: read
+
 jobs:
   build-valkey:
     # Capture source tarball and generate checksum for it
     name: Build package ${{ matrix.distro.target }} ${{ matrix.distro.arch }}
     runs-on: 'ubuntu-latest'
-    permissions:
-      contents: read
     strategy:
       fail-fast: false
       matrix: ${{ fromJSON(inputs.build_matrix) }}

diff --git a/.github/workflows/call-build-linux-x86-packages.yml b/.github/workflows/call-build-linux-x86-packages.yml
@@ -29,13 +29,14 @@ on:
         description: The S3 secret access key for the bucket.
         required: false
 
+permissions:
+  contents: read
+
 jobs:
   build-valkey:
     # Capture source tarball and generate checksum for it
     name: Build package ${{ matrix.distro.target }} ${{ matrix.distro.arch }}
     runs-on: 'ubuntu-latest'
-    permissions:
-      contents: read
     strategy:
       fail-fast: false
       matrix: ${{ fromJSON(inputs.build_matrix) }}