senzing-factory/build-resources#15 update go workflow permissions (#78)

senzing-garage · May 8, 2024 · f1906bf · f1906bf
1 parent bf1d407
commit f1906bf
Show file tree

Hide file tree

Showing 6 changed files with 18 additions and 0 deletions.
diff --git a/.github/workflows/go-proxy-pull.yaml b/.github/workflows/go-proxy-pull.yaml
@@ -5,6 +5,9 @@ on:
     tags:
       - "v[0-9]+.[0-9]+.[0-9]+"
 
+permissions:
+  contents: write
+
 jobs:
   go-proxy-pull:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/go-test-darwin.yaml b/.github/workflows/go-test-darwin.yaml
@@ -2,6 +2,9 @@ name: go test darwin
 
 on: [push]
 
+permissions:
+  contents: read
+
 jobs:
   go-test-darwin:
     name: "go test with OS: ${{ matrix.os }}; Go: ${{ matrix.go }}"

diff --git a/.github/workflows/go-test-linux.yaml b/.github/workflows/go-test-linux.yaml
@@ -2,6 +2,9 @@ name: go test linux
 
 on: [push]
 
+permissions:
+  contents: read
+
 jobs:
   go-test-linux:
     name: "go test with OS: ${{ matrix.os }}; Go: ${{ matrix.go }}"

diff --git a/.github/workflows/go-test-windows.yaml b/.github/workflows/go-test-windows.yaml
@@ -2,6 +2,9 @@ name: go test windows
 
 on: [push]
 
+permissions:
+  contents: read
+
 jobs:
   go-test-windows:
     name: "go test with OS: ${{ matrix.os }}; Go: ${{ matrix.go }}"

diff --git a/.github/workflows/gofmt.yaml b/.github/workflows/gofmt.yaml
@@ -4,6 +4,9 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read
+
 jobs:
   gofmt:
     uses: senzing-factory/build-resources/.github/workflows/gofmt.yaml@v1
diff --git a/.github/workflows/gosec.yaml b/.github/workflows/gosec.yaml
@@ -8,6 +8,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   gosec:
     runs-on: ubuntu-latest