From ba4888ae4154b410bea0399c5added1755d742c3 Mon Sep 17 00:00:00 2001 From: "Patrick M. Niedzielski" Date: Mon, 19 Oct 2026 15:59:01 -0400 Subject: [PATCH] CI: Add token permissions for GitHub Actions workflows This patch adds minimal permissions for the last few workflows we have that are missing explicit permissions. Signed-off-by: Patrick M. Niedzielski --- .github/workflows/build_wheels.yml | 3 +++ .github/workflows/news-check.yaml | 4 ++++ 2 files changed, 7 insertions(+) diff --git a/.github/workflows/build_wheels.yml b/.github/workflows/build_wheels.yml index 30e8382..c1054e8 100644 --- a/.github/workflows/build_wheels.yml +++ b/.github/workflows/build_wheels.yml @@ -15,6 +15,9 @@ on: # At 12:00 on every day-of-month - cron: "0 12 */1 * *" +permissions: + contents: read + concurrency: group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} cancel-in-progress: true diff --git a/.github/workflows/news-check.yaml b/.github/workflows/news-check.yaml index 4600fd6..2bcac0d 100644 --- a/.github/workflows/news-check.yaml +++ b/.github/workflows/news-check.yaml @@ -10,6 +10,10 @@ on: - "labeled" - "unlabeled" +permissions: + contents: read + pull-requests: read + jobs: news_entry_check: runs-on: ubuntu-slim