GitHub Workflows security hardening (#26640)

Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com>

Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com>
This commit is contained in:
Alex 2022-09-01 22:36:51 +02:00 committed by GitHub
parent 45ea75f385
commit 4dacd997a5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -8,8 +8,13 @@ on:
types: types:
- completed - completed
permissions:
contents: read
jobs: jobs:
comment: comment:
permissions:
pull-requests: write
runs-on: ubuntu-latest runs-on: ubuntu-latest
if: > if: >
${{ github.event.workflow_run.event == 'pull_request' && ${{ github.event.workflow_run.event == 'pull_request' &&