mirror of https://github.com/CrimsonTome/tldr.git
workflows/*: add security hardening (#8518)
parent
163f2452da
commit
0fbe2488eb
|
@ -2,6 +2,9 @@ name: CI
|
|||
|
||||
on: ['push', 'pull_request']
|
||||
|
||||
permissions:
|
||||
contents: read # to fetch code (actions/checkout)
|
||||
|
||||
jobs:
|
||||
ci:
|
||||
runs-on: ubuntu-latest
|
||||
|
|
|
@ -4,8 +4,12 @@ on:
|
|||
push:
|
||||
branches: ['main']
|
||||
|
||||
permissions: {}
|
||||
jobs:
|
||||
mirror:
|
||||
permissions:
|
||||
contents: write # to update branch
|
||||
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
|
|
|
@ -4,8 +4,13 @@ on:
|
|||
schedule:
|
||||
- cron: '0 0 * * *'
|
||||
|
||||
permissions: {}
|
||||
jobs:
|
||||
stale:
|
||||
permissions:
|
||||
issues: write # to close stale issues (actions/stale)
|
||||
pull-requests: write # to close stale PRs (actions/stale)
|
||||
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
|
|
Loading…
Reference in New Issue