From 6e222edb502b02b0d137ee4f37a9d514b79fdb46 Mon Sep 17 00:00:00 2001 From: Antoine du Hamel Date: Mon, 12 May 2025 01:10:36 +0200 Subject: [PATCH] tools: add read permission to workflows that read contents MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Not having this permission is OK because the repo is public, but on private forks, it fails the checkout step. PR-URL: https://github.com/nodejs/node/pull/58255 Reviewed-By: LiviaMedeiros Reviewed-By: Michaël Zasso Reviewed-By: Benjamin Gruenbaum Reviewed-By: Luigi Pinca Reviewed-By: Rafael Gonzaga --- .github/workflows/lint-release-proposal.yml | 1 + .github/workflows/notify-on-push.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/lint-release-proposal.yml b/.github/workflows/lint-release-proposal.yml index 9d8ba5998a7..88bbd5d4e9b 100644 --- a/.github/workflows/lint-release-proposal.yml +++ b/.github/workflows/lint-release-proposal.yml @@ -20,6 +20,7 @@ jobs: lint-release-commit: runs-on: ubuntu-latest permissions: + contents: read pull-requests: read steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 diff --git a/.github/workflows/notify-on-push.yml b/.github/workflows/notify-on-push.yml index 14b184deb51..2b85784d568 100644 --- a/.github/workflows/notify-on-push.yml +++ b/.github/workflows/notify-on-push.yml @@ -32,6 +32,7 @@ jobs: if: github.repository == 'nodejs/node' runs-on: ubuntu-latest permissions: + contents: read pull-requests: write steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2