mirror of
https://github.com/ohmyzsh/ohmyzsh.git
synced 2025-12-25 01:29:51 +00:00
ci: harden permissions for GitHub Workflows (#11174)
* build: harden main.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> * build: harden project.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> * Update project.yml The permissions are not necessary, because a separate token is used `GITHUB_TOKEN: ${{ secrets.PROJECT_TOKEN }}`
This commit is contained in:
1
.github/workflows/project.yml
vendored
1
.github/workflows/project.yml
vendored
@@ -9,6 +9,7 @@ concurrency:
|
||||
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
|
||||
cancel-in-progress: true
|
||||
|
||||
permissions: {}
|
||||
jobs:
|
||||
add-to-project:
|
||||
name: Add to project
|
||||
|
||||
Reference in New Issue
Block a user