security: add permissions block to workflows (#101)

* security: add permissions block to workflows * Add permissions
elastic · Mar 12, 2024 · 0ea6f96 · 0ea6f96
1 parent c23b030
commit 0ea6f96
Show file tree

Hide file tree

Showing 4 changed files with 16 additions and 0 deletions.
diff --git a/.github/workflows/addToAPMProject.yml b/.github/workflows/addToAPMProject.yml
@@ -3,6 +3,9 @@ on:
   issues:
     types:
       - opened
+permissions:
+  contents: read
+
 jobs:
   add_to_project:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
@@ -22,6 +22,9 @@ on:
 env:
   AGENT_TESTS: java nodejs
 
+permissions:
+  contents: read
+
 jobs:
   integration-test:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
@@ -5,6 +5,11 @@ on:
   pull_request_target:
     types: [opened]
 
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
+
 jobs:
   triage:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/test-reporter.yml b/.github/workflows/test-reporter.yml
@@ -8,6 +8,11 @@ on:
     types:
       - completed
 
+permissions:
+  contents: read
+  actions: read
+  checks: write
+
 jobs:
   report:
     runs-on: ubuntu-latest