search

gojuno / minimock

Powerful mock generation tool for Go programming language
MIT License
574 stars 38 forks source link

ci: restrict the job permission for security #84

Closed suzuki-shunsuke closed 6 months ago

suzuki-shunsuke commented 6 months ago

I forgot to set the permission in https://github.com/gojuno/minimock/pull/82 . This workflow doesn't require any permissions. The permission should be restricted to least privileges.

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#defining-access-for-the-github_token-scopes-1

You can use the following syntax to disable permissions for all of the available scopes:

permissions: {}