From 86a99e9e45ed6d8f29b0a50d3b4aaadbf3e9b579 Mon Sep 17 00:00:00 2001 From: Alex Date: Tue, 20 Sep 2022 13:55:54 +0200 Subject: [PATCH] build: harden create_containers.yml permissions Signed-off-by: Alex --- .github/workflows/create_containers.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/create_containers.yml b/.github/workflows/create_containers.yml index 932fef48b..e1e5a22fe 100644 --- a/.github/workflows/create_containers.yml +++ b/.github/workflows/create_containers.yml @@ -4,6 +4,9 @@ on: schedule: - cron: '0 0 * * *' +permissions: + contents: read # to fetch code (actions/checkout) + jobs: push_to_registry: runs-on: ubuntu-latest