diff --git a/.github/workflows/live-test.yml b/.github/workflows/live-test.yml index d31da75..a7a2429 100644 --- a/.github/workflows/live-test.yml +++ b/.github/workflows/live-test.yml @@ -3,7 +3,8 @@ on: pull_request: permissions: - contents: read + contents: write + checks: write pull-requests: write jobs: diff --git a/.github/workflows/multiple-files.yml b/.github/workflows/multiple-files.yml index 7fbe3cb..b9e8ebf 100644 --- a/.github/workflows/multiple-files.yml +++ b/.github/workflows/multiple-files.yml @@ -1,6 +1,12 @@ name: Test Multipli File on: pull_request: + +permissions: + contents: write + checks: write + pull-requests: write + jobs: test-multiple-files: runs-on: ubuntu-latest diff --git a/.github/workflows/test-branch.yml b/.github/workflows/test-branch.yml index b32796d..0c01b57 100644 --- a/.github/workflows/test-branch.yml +++ b/.github/workflows/test-branch.yml @@ -4,6 +4,11 @@ on: pull_request: push: +permissions: + contents: write + checks: write + pull-requests: write + jobs: test-branch: runs-on: ubuntu-latest diff --git a/.github/workflows/update-coverage-on-readme.yml b/.github/workflows/update-coverage-on-readme.yml index 5e269f7..709f4d4 100644 --- a/.github/workflows/update-coverage-on-readme.yml +++ b/.github/workflows/update-coverage-on-readme.yml @@ -3,6 +3,12 @@ on: push: branches: - test-branch + +permissions: + contents: write + checks: write + pull-requests: write + jobs: update-coverage-on-readme: runs-on: ubuntu-latest diff --git a/README.md b/README.md index fff4812..1a1a740 100644 --- a/README.md +++ b/README.md @@ -99,6 +99,15 @@ on: pull_request: branches: - '*' + +# https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs +# `contents` is for permission to the contents of the repository. +# `pull-requests` is for permission to pull request +permissions: + contents: write + checks: write + pull-requests: write + jobs: build: runs-on: ubuntu-latest @@ -226,6 +235,15 @@ If your coverage html report will not change, it wouldn't push any changes to re name: Update Coverage on Readme on: push: + +# https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs +# `contents` is for permission to the contents of the repository. +# `pull-requests` is for permission to pull request +permissions: + contents: write + checks: write + pull-requests: write + jobs: update-coverage-on-readme: runs-on: ubuntu-latest