Set GITHUB_TOKEN permissions to read only in OpenAPI workflow

3 years ago · 07b9ba2bb4
parent 2491dd513c
commit 07b9ba2bb4
1 changed files with 2 additions and 0 deletions
--- a/.github/workflows/openapi.yml
+++ b/.github/workflows/openapi.yml
@ -9,6 +9,7 @@ jobs:
  openapi-head:
    name: OpenAPI - HEAD
    runs-on: ubuntu-latest
+    permissions: read-all
    steps:
      - name: Checkout repository
        uses: actions/checkout@v2
@ -34,6 +35,7 @@ jobs:
    name: OpenAPI - BASE
    if: ${{ github.base_ref != '' }}
    runs-on: ubuntu-latest
+    permissions: read-all
    steps:
      - name: Checkout repository
        uses: actions/checkout@v2