mirror of
https://github.com/distribution/distribution.git
synced 2025-08-13 20:45:48 +00:00
build: harden build.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
parent
78b9c98c5c
commit
1667a66856
6
.github/workflows/build.yml
vendored
6
.github/workflows/build.yml
vendored
@ -14,6 +14,9 @@ on:
|
|||||||
env:
|
env:
|
||||||
DOCKERHUB_SLUG: distribution/distribution
|
DOCKERHUB_SLUG: distribution/distribution
|
||||||
|
|
||||||
|
permissions:
|
||||||
|
contents: read # to fetch code (actions/checkout)
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
test:
|
test:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
@ -43,6 +46,9 @@ jobs:
|
|||||||
directory: ./
|
directory: ./
|
||||||
|
|
||||||
build:
|
build:
|
||||||
|
permissions:
|
||||||
|
contents: write # to create GitHub release (softprops/action-gh-release)
|
||||||
|
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
needs:
|
needs:
|
||||||
- test
|
- test
|
||||||
|
Loading…
Reference in New Issue
Block a user