mirror of
https://github.com/distribution/distribution.git
synced 2025-08-10 11:11:59 +00:00
build: harden build.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
parent
78b9c98c5c
commit
1667a66856
6
.github/workflows/build.yml
vendored
6
.github/workflows/build.yml
vendored
@ -14,6 +14,9 @@ on:
|
||||
env:
|
||||
DOCKERHUB_SLUG: distribution/distribution
|
||||
|
||||
permissions:
|
||||
contents: read # to fetch code (actions/checkout)
|
||||
|
||||
jobs:
|
||||
test:
|
||||
runs-on: ubuntu-latest
|
||||
@ -43,6 +46,9 @@ jobs:
|
||||
directory: ./
|
||||
|
||||
build:
|
||||
permissions:
|
||||
contents: write # to create GitHub release (softprops/action-gh-release)
|
||||
|
||||
runs-on: ubuntu-latest
|
||||
needs:
|
||||
- test
|
||||
|
Loading…
Reference in New Issue
Block a user