Tightening workflow permissions.

ministryofjustice · Feb 13, 2023 · 8e3972f · 8e3972f
1 parent 49d86d5
commit 8e3972f
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
@@ -7,9 +7,11 @@ on:
     paths:
       - '**.md'
       - '.github/workflows/documentation.yml'
-
+permissions: {}
 jobs:
   docs:
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0

diff --git a/.github/workflows/go-terratest.yml b/.github/workflows/go-terratest.yml
@@ -1,12 +1,16 @@
 on:
   pull_request:
     types: [opened, edited, reopened, synchronize]
+permissions: {}
 env:
   AWS_ACCESS_KEY_ID:  ${{ secrets.AWS_ACCESS_KEY_ID }}
   AWS_SECRET_ACCESS_KEY:  ${{ secrets.AWS_SECRET_ACCESS_KEY }}
   TF_IN_AUTOMATION: true
 jobs:
   go-tests:
+    permissions:
+      contents: read
+      actions: write
     name: Run Go Unit Tests
     runs-on: ubuntu-latest
     steps: