jaculabilis/danbooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

ci: limit workflow permissions.

Browse Source 
Make it so pull requests from outside contributors can't edit workflows
under .github/workflows/ without approval. Also limit workflows to the
minimum permissions necessary.
This commit is contained in:
evazion
2021-09-18 04:31:48 -05:00
parent 39fa2fe02d
commit 52cf13dff1
3 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
.github/CODEOWNERS vendored Normal file
View File

@@ -0,0 +1,7 @@
# This file is used by Github to prevent pull requests from modifying CI
# workflow files without approval.
#
# https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions#using-codeowners-to-monitor-changes
# https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
.github/ @evazion