stevenhorsman 2f0dc2ae24 workflows: gatekeeper: Update permissions ...

Restrict the permissions of gatekeeper flow to read
contents only for better security

Signed-off-by: stevenhorsman <steven@uk.ibm.com>

2025-05-28 09:57:19 +01:00

..

actionlint.yaml

workflows: Add actionlint workflows

2024-12-06 11:36:08 +00:00

add-issues-to-project.yaml

workflows: linting: Fix shellcheck SC2046

2024-12-06 13:50:12 +00:00

add-pr-sizing-label.yaml

workflows: Add apt update before install

2025-04-23 09:06:08 +01:00

basic-ci-amd64.yaml

CI: cri-containerd: upgrade the LTS / Active versions for containerd

2025-03-05 23:09:24 +08:00

basic-ci-s390x.yaml

ci: Extend basic s390x tests

2025-04-22 21:34:02 +02:00

build-checks-preview-riscv64.yaml

ci: Enable build-check for agent on riscv64

2025-05-06 01:48:37 +00:00

build-checks.yaml

workflow: Set RUST_LIB_BACKTRACE=0

2025-04-30 19:38:13 +01:00

build-kata-static-tarball-amd64.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

build-kata-static-tarball-arm64.yaml

packaging: Build edk2 for arm64

2025-05-15 10:12:24 +01:00

build-kata-static-tarball-ppc64le.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

build-kata-static-tarball-riscv64.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

build-kata-static-tarball-s390x.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

cargo-deny-runner.yaml

workflows: linting: Fix incorrect properties

2024-12-06 13:50:12 +00:00

ci-coco-stability.yaml

gha: Fix entry for ci coco stability yaml

2024-08-26 17:14:35 +00:00

ci-devel.yaml

workflows: Add build-checks to manual CI

2025-02-25 11:38:49 +00:00

ci-nightly-s390x.yaml

GHA: Add VFIO-AP to s390x nightly tests for CoCo

2025-04-29 16:06:12 +02:00

ci-nightly.yaml

workflows: Remove the possibility to manually trigger the nightly CI

2024-10-23 13:19:45 +02:00

ci-on-push.yaml

ci: Select jobs by touched code

2024-10-03 09:08:33 +02:00

ci-weekly.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

ci.yaml

ci: Extend basic s390x tests

2025-04-22 21:34:02 +02:00

cleanup-resources.yaml

ci: Use ubuntu-22.04 instead of ubuntu-latest

2024-08-27 16:44:39 +00:00

codeql.yml

workflows: Add codeql config

2025-02-25 15:05:43 +00:00

commit-message-check.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

darwin-tests.yaml

versions: Bump golang version

2025-04-23 12:37:48 +01:00

docs-url-alive-check.yaml

versions: Bump golang version

2025-04-23 12:37:48 +01:00

gatekeeper-skipper.yaml

gha: Hardcode ubuntu-22.04 instead of latest

2024-11-08 11:00:15 -06:00

gatekeeper.yaml

workflows: gatekeeper: Update permissions

2025-05-28 09:57:19 +01:00

kata-runtime-classes-sync.yaml

workflows: linting: Fix shellcheck SC2006

2024-12-06 13:50:12 +00:00

move-issues-to-in-progress.yaml

workflows: linting: Fix shellcheck SC1001

2024-12-06 13:50:12 +00:00

payload-after-push.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

PR-wip-checks.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

publish-kata-deploy-payload.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

release-amd64.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

release-arm64.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

release-ppc64le.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

release-s390x.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

release.yaml

helm: release: Publish our helm charts to the OCI registries

2025-05-14 20:20:35 +02:00

run-cri-containerd-tests-ppc64le.yaml

gha: use runner hooks instead of pre/post scripts for ppc64le runners

2025-03-14 17:12:54 +05:30

run-k8s-tests-on-aks.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

run-k8s-tests-on-amd64.yaml

workflows: Add delete kata-deploy timeouts for crio tests

2025-02-03 11:45:43 +00:00

run-k8s-tests-on-arm64.yaml

ci: Run k8s tests on arm64

2025-02-24 18:43:20 +01:00

run-k8s-tests-on-ppc64le.yaml

gha: use runner hooks instead of pre/post scripts for ppc64le runners

2025-03-14 17:12:54 +05:30

run-k8s-tests-on-zvsi.yaml

ci: Unify on $GH_PR_NUMBER environment variable

2025-01-17 10:53:08 -06:00

run-kata-coco-stability-tests.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

run-kata-coco-tests.yaml

workflows/run-k8s-tests-coco-nontee: add step to report tests

2025-05-20 14:43:38 -03:00

run-kata-deploy-tests-on-aks.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

run-kata-deploy-tests.yaml

tests: kata-deploy: Run installation with only one VMM

2025-03-05 19:44:27 +01:00

run-kata-monitor-tests.yaml

ci: Move run-monitor to free runner

2024-08-27 16:43:33 +00:00

run-metrics.yaml

workflows: Improve metrics jobs

2025-03-01 17:50:05 +00:00

run-runk-tests.yaml

workflow: Remove/skip runk CI

2024-11-07 14:16:30 +00:00

shellcheck_required.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

shellcheck.yaml

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

stale.yaml

ci: Use ubuntu-22.04 instead of ubuntu-latest

2024-08-27 16:44:39 +00:00

static-checks-self-hosted.yaml

ci: Enable partial components build-check on riscv

2025-02-26 15:38:39 +08:00

static-checks.yaml

workflow: Set RUST_LIB_BACKTRACE=0

2025-04-30 19:38:13 +01:00