public nobgit read

NobMail

Based on mailcow: dockerized

Languages

Repository composition by tracked source files.

PHP

PHP 49% JavaScript 35% HTML 9% CSS 4% Shell 2% Python 1% Lua 0% Perl 0% Ruby 0% SCSS 0%

Create file Wiki Documentation

Clone

https://nobgit.com/orgs/nobgit/nobmail.git

ssh://[email protected]:2222/orgs/nobgit/nobmail.git

Commit

GitHub Workflows security hardening (#4761)

* build: harden integration_tests.yml permissions Signed-off-by: Alex <[email protected]> * build: harden image_builds.yml permissions Signed-off-by: Alex <[email protected]> Signed-off-by: Alex <[email protected]> Co-authored-by: Niklas Meyer <[email protected]>

f28e18e6

Alex <[email protected]> 3 years, 10 months ago

.github/workflows/image_builds.yml      | 3 +++
 .github/workflows/integration_tests.yml | 3 +++
 2 files changed, 6 insertions(+)

Diff

diff --git a/.github/workflows/image_builds.yml b/.github/workflows/image_builds.yml
index 007b1014..fe660754 100644
--- a/.github/workflows/image_builds.yml
+++ b/.github/workflows/image_builds.yml
@@ -5,6 +5,9 @@ on:
     branches: [ "master", "staging" ]
   workflow_dispatch:
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   docker_image_builds:
     strategy:
diff --git a/.github/workflows/integration_tests.yml b/.github/workflows/integration_tests.yml
index 7d6c4ac2..ee083bf4 100644
--- a/.github/workflows/integration_tests.yml
+++ b/.github/workflows/integration_tests.yml
@@ -5,6 +5,9 @@ on:
     branches: [ "master", "staging" ]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   integration_tests:
     runs-on: ubuntu-latest