[ci] Explicitly declare permissions and limit credentials (#15324)

Authored by: bashonly
2026-09-12 19:55:57 +00:00 · 2025-12-19 19:22:23 +00:00
parent 825648a740
commit a6a8f6b6d6
13 changed files with 96 additions and 43 deletions
@@ -4,10 +4,14 @@ on:
  schedule:
    - cron: '0 22 1,6,11,16,21,27 * *'

+permissions: {}
+
 jobs:
  build:
    if: |
      vars.KEEP_CACHE_WARM || github.event_name == 'workflow_dispatch'
+    permissions:
+      contents: read
    uses: ./.github/workflows/build.yml
    with:
      version: '999999'
@@ -19,5 +23,3 @@ jobs:
      musllinux: false
      macos: true
      windows: true
-    permissions:
-      contents: read