[3.10] ci: add GitHub token permissions (GH-92999) (#98161)

ezio-melotti · varunsh-coder · web-flow · commit 64ce2cba9890 · 2022-10-10T21:46:09.000+02:00
* ci: add GitHub token permissions (#92999) (cherry picked from commit b96e20c) * [3.10] ci: add GitHub token permissions (GH-92999). (cherry picked from commit b96e20c) Co-authored-by: Varun Sharma <varunsh@stepsecurity.io> Co-authored-by: Varun Sharma <varunsh@stepsecurity.io>
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -19,6 +19,9 @@ on:
     - 3.8
     - 3.7
 
+permissions:
+  contents: read
+
 jobs:
   check_source:
     name: 'Check for source changes'
diff --git a/.github/workflows/build_msi.yml b/.github/workflows/build_msi.yml
@@ -20,6 +20,9 @@ on:
     paths:
     - 'Tools/msi/**'
 
+permissions:
+  contents: read
+
 jobs:
   build_win32:
     name: 'Windows (x86) Installer'
diff --git a/.github/workflows/doc.yml b/.github/workflows/doc.yml
@@ -20,6 +20,9 @@ on:
     - 'Doc/**'
     - 'Misc/**'
 
+permissions:
+  contents: read
+
 jobs:
   build_doc:
     name: 'Docs'
