tensorflow / addons

Useful extra functionality for TensorFlow 2.x maintained by SIG-addons
Apache License 2.0
1.69k stars 611 forks source link

Set permissions to GITHUB_TOKEN #2848

Closed joycebrum closed 1 year ago

joycebrum commented 1 year ago

Description

Setting GITHUB_TOKEN permissions for all workflows. I was not sure how to flag the type of change.

Fixes #2847

Type of change

Checklist:

How Has This Been Tested?

The permissions were mostly generated from the Step Security tool, which has a database for actions needed permissions. To the workflows that used github api calls, I've checked the needed permissions by looking at https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs#overview

bhack commented 1 year ago

/cc @mihaimaruseac

mihaimaruseac commented 1 year ago

Need someone from addons to merge it

bhack commented 1 year ago

@mihaimaruseac Thank you for the check

seanpmorgan commented 1 year ago

tyvm!