From d2632cb570c3e4633e689af1aac4d9050b2b02e2 Mon Sep 17 00:00:00 2001 From: Armand Tresova Date: Tue, 8 Sep 2026 10:57:56 -0400 Subject: [PATCH] Added Permissions to Workflows --- .github/workflows/gh-release.yml | 3 +++ .github/workflows/lint.yml | 3 +++ .github/workflows/phpcs.yml | 3 +++ .github/workflows/phpstan.yml | 3 +++ .github/workflows/phpunit.yml | 3 +++ .github/workflows/wp-release.yml | 3 +++ 6 files changed, 18 insertions(+) diff --git a/.github/workflows/gh-release.yml b/.github/workflows/gh-release.yml index 0039f32..fedac04 100644 --- a/.github/workflows/gh-release.yml +++ b/.github/workflows/gh-release.yml @@ -7,6 +7,9 @@ on: required: true type: string +permissions: + contents: write + jobs: release: name: "Release" diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 61e8f6f..62f04d0 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -7,6 +7,9 @@ on: branches: [ main, develop ] workflow_dispatch: +permissions: + contents: read + jobs: lint: runs-on: ubuntu-latest diff --git a/.github/workflows/phpcs.yml b/.github/workflows/phpcs.yml index 4e81f4d..cd9d43a 100644 --- a/.github/workflows/phpcs.yml +++ b/.github/workflows/phpcs.yml @@ -7,6 +7,9 @@ on: # branches: [ main, develop ] workflow_dispatch: +permissions: + contents: read + jobs: phpcs: runs-on: ubuntu-latest diff --git a/.github/workflows/phpstan.yml b/.github/workflows/phpstan.yml index 875efcd..2ae8dec 100644 --- a/.github/workflows/phpstan.yml +++ b/.github/workflows/phpstan.yml @@ -7,6 +7,9 @@ on: # branches: [ main, develop ] workflow_dispatch: +permissions: + contents: read + jobs: phpstan: runs-on: ubuntu-latest diff --git a/.github/workflows/phpunit.yml b/.github/workflows/phpunit.yml index 776e43d..a3ba81d 100644 --- a/.github/workflows/phpunit.yml +++ b/.github/workflows/phpunit.yml @@ -7,6 +7,9 @@ on: branches: [ main, develop ] workflow_dispatch: +permissions: + contents: read + jobs: phpunit: runs-on: ubuntu-latest diff --git a/.github/workflows/wp-release.yml b/.github/workflows/wp-release.yml index e0a3eb4..272daa6 100644 --- a/.github/workflows/wp-release.yml +++ b/.github/workflows/wp-release.yml @@ -7,6 +7,9 @@ on: required: true type: string +permissions: + contents: read + jobs: tag: name: "build"