cosmos-sdk/.github/workflows
nathannaveen 274319a790
chore: Set permissions for GitHub actions (#12354)
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
2022-06-25 09:23:58 +02:00
..
atlas.yml build(deps): Bump technote-space/get-diff-action from 6.0.1 to 6.1.0 (#12319) 2022-06-21 20:26:30 +02:00
check-docs.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
clean-artifacts.yml ci: split unit tests across 4 machines (#6297) 2020-05-29 15:25:27 +02:00
codeql-analysis.yml ci: add codeql checks on main (#11949) 2022-05-12 16:30:37 +02:00
cosmovisor-release.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
dependencies-review.yml build(deps): Bump actions/dependency-review-action from 1 to 2 (#12265) 2022-06-15 18:14:03 +02:00
deploy-docs.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
docker.yml build(deps): Bump docker/setup-buildx-action from 1 to 2 (#11890) 2022-05-06 18:30:28 +02:00
labeler.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
linkchecker.yml build(deps): Bump gaurav-nelson/github-action-markdown-link-check (#11377) 2022-03-15 17:41:59 +01:00
lint-pr.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
lint.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
proto-docker.yml build(deps): Bump docker/setup-buildx-action from 1 to 2 (#11890) 2022-05-06 18:30:28 +02:00
proto-registry.yml build(deps): Bump bufbuild/buf-setup-action from 1.5.0 to 1.6.0 (#12322) 2022-06-21 22:24:09 +02:00
proto.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
release-sims.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
release.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
sims-045.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
sims-046.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
sims.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
stale.yml chore: Set permissions for GitHub actions (#12354) 2022-06-25 09:23:58 +02:00
test-race.yml build(deps): Bump technote-space/get-diff-action from 6.0.1 to 6.1.0 (#12319) 2022-06-21 20:26:30 +02:00
test.yml build(deps): Bump technote-space/get-diff-action from 6.0.1 to 6.1.0 (#12319) 2022-06-21 20:26:30 +02:00