Merge pull request #4657 from MidnightCommander/feature/update-workflows

maint: specify permissions and timeouts for all workflows

Author: zyv

.github/workflows/ci-alpine.yml

@@ -6,9 +6,13 @@ on:
 jobs:
   build-alpine:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
+
     container:
       image: alpine:latest
-    timeout-minutes: 5
+
+    permissions:
+      contents: read
 
     steps:
       - uses: actions/checkout@v4

.github/workflows/ci-fedora.yml

@@ -6,9 +6,13 @@ on:
 jobs:
   build-fedora:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
+
     container:
       image: fedora:latest
-    timeout-minutes: 5
+
+    permissions:
+      contents: read
 
     steps:
       - name: Install git inside container

.github/workflows/ci-freebsd.yml

@@ -14,6 +14,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
 
+    permissions:
+      contents: read
+
     steps:
       - uses: actions/checkout@v4
 

.github/workflows/ci-macos.yml

@@ -14,6 +14,9 @@ jobs:
     runs-on: macos-latest
     timeout-minutes: 5
 
+    permissions:
+      contents: read
+
     steps:
       - uses: actions/checkout@v4
 

.github/workflows/ci-solaris.yml

@@ -8,6 +8,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
 
+    permissions:
+      contents: read
+
     steps:
       - uses: actions/checkout@v4
 

.github/workflows/ci-ubuntu.yml

@@ -8,6 +8,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
 
+    permissions:
+      contents: read
+
     steps:
       - uses: actions/checkout@v4
 

.github/workflows/transifex.yml

@@ -10,9 +10,11 @@ concurrency:
 
 jobs:
   transifex-upload:
-
     runs-on: ubuntu-latest
-    timeout-minutes: 15
+    timeout-minutes: 5
+
+    permissions:
+      contents: read
 
     steps:
       - uses: actions/checkout@v4

.github/workflows/update-sources.yml

@@ -11,6 +11,11 @@ concurrency:
 jobs:
   update-sources:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
+
+    permissions:
+      contents: read
+
     steps:
       - uses: actions/checkout@v4