CI: define read-only permission for GitHub Workflow

jbeder / yaml-cpp

A YAML parser and emitter in C++

MIT License

4.92k stars 1.78k forks source link

CI: define read-only permission for GitHub Workflow #1175

Closed diogoteles08 closed 1 year ago

diogoteles08 commented 1 year ago

It secures the repo against erroneous or malicious actions from external jobs you call from your workflow. It's specially important for the case they get compromised, for example.

Closes #1174