Chore: Harden action permissions (#104820)

* harden action permissions * Update .github/workflows/ephemeral-instances-pr-comment.yml Co-authored-by: Kevin Minehart <5140827+kminehart@users.noreply.github.com> * update documentation-ci --------- Co-authored-by: Kevin Minehart <5140827+kminehart@users.noreply.github.com>
2025-05-02 12:13:05 +01:00
parent 9a7d85c85f
commit d8fb1e8e4e
11 changed files with 74 additions and 11 deletions
@@ -11,10 +11,14 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ startsWith(github.ref, 'refs/pull/') }}

+permissions: {}
+
 jobs:
  sqlite:
    name: Sqlite
    runs-on: ubuntu-latest-8-cores
+    permissions:
+      contents: read
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
@@ -31,6 +35,8 @@ jobs:
  mysql:
    name: MySQL
    runs-on: ubuntu-latest-8-cores
+    permissions:
+      contents: read
    env:
      GRAFANA_TEST_DB: mysql
      MYSQL_HOST: 127.0.0.1
@@ -63,6 +69,8 @@ jobs:
  postgres:
    name: Postgres
    runs-on: ubuntu-latest-8-cores
+    permissions:
+      contents: read
    services:
      postgres:
        image: postgres:12.3-alpine