From 784dd5306e79b27c7d6991315e45a3ae31846782 Mon Sep 17 00:00:00 2001
From: Jan Calanog <jan.calanog@elastic.co>
Date: Tue, 12 Mar 2024 12:35:43 +0100
Subject: [PATCH] security: add permissions block to workflows (#24)

* security: add permissions block to workflows

* Update .github/workflows/test-reporter.yml
---
 .github/workflows/opentelemetry.yml | 3 +++
 .github/workflows/test-reporter.yml | 5 +++++
 2 files changed, 8 insertions(+)

diff --git a/.github/workflows/opentelemetry.yml b/.github/workflows/opentelemetry.yml
index b25c09f..e34a6fa 100644
--- a/.github/workflows/opentelemetry.yml
+++ b/.github/workflows/opentelemetry.yml
@@ -8,6 +8,9 @@ on:
       - test-reporter
     types: [completed]
 
+permissions:
+  contents: read
+
 jobs:
   otel-export-trace:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/test-reporter.yml b/.github/workflows/test-reporter.yml
index 39b10a0..e7ce6e2 100644
--- a/.github/workflows/test-reporter.yml
+++ b/.github/workflows/test-reporter.yml
@@ -8,6 +8,11 @@ on:
     types:
       - completed
 
+permissions:
+  contents: read
+  actions: read
+  checks: write
+
 jobs:
   report:
     runs-on: ubuntu-latest