Skip to content

Commit f08cc6b

Browse files
CopilotCreeper19472
andcommitted
Add explicit permissions to workflow jobs for security
Co-authored-by: Creeper19472 <38857196+Creeper19472@users.noreply.github.com>
1 parent d804287 commit f08cc6b

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

.github/workflows/build-python.yml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,8 @@ jobs:
2323
build-android:
2424
name: Build Python for Android
2525
runs-on: ubuntu-latest
26+
permissions:
27+
contents: write # Required for uploading to releases
2628
env:
2729
NDK_VERSION: r27
2830

@@ -77,6 +79,8 @@ jobs:
7779
build-darwin:
7880
name: Build Python for iOS and macOS
7981
runs-on: macos-latest
82+
permissions:
83+
contents: write # Required for uploading to releases
8084

8185
steps:
8286
- name: Checkout code
@@ -143,6 +147,8 @@ jobs:
143147
build-linux:
144148
name: Build Python for Linux
145149
runs-on: ubuntu-latest
150+
permissions:
151+
contents: write # Required for uploading to releases
146152

147153
steps:
148154
- name: Checkout code
@@ -203,6 +209,8 @@ jobs:
203209
build-windows:
204210
name: Build Python for Windows
205211
runs-on: windows-latest
212+
permissions:
213+
contents: write # Required for uploading to releases
206214

207215
steps:
208216
- name: Checkout code

0 commit comments

Comments
 (0)