Add permissions to builders workflows

cloudposse · Jun 11, 2024 · 277d1ac · 277d1ac
1 parent 7d4f41a
commit 277d1ac
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 1 deletion.
diff --git a/.github/workflows/apkbuild.yml b/.github/workflows/apkbuild.yml
@@ -14,6 +14,12 @@ on:
     paths:
       - apk/**
 
+permissions:
+  contents: read
+  packages: write
+  attestations: write
+  id-token: write
+
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
@@ -47,7 +53,7 @@ jobs:
           echo "tags=${TAGS}" >> $GITHUB_OUTPUT
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
-      - name: Login to DockerHub
+      - name: Login to Container Registry
         uses: docker/login-action@v3
         with:
           registry: ghcr.io

diff --git a/.github/workflows/debbuild.yml b/.github/workflows/debbuild.yml
@@ -16,6 +16,12 @@ on:
       - deb/**
       - .github/workflows/debbuild.yml
 
+permissions:
+  contents: read
+  packages: write
+  attestations: write
+  id-token: write
+
 jobs:
   build-and-push:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/rpmbuild.yml b/.github/workflows/rpmbuild.yml
@@ -16,6 +16,12 @@ on:
     - rpm/**
     - .github/workflows/rpmbuild.yml
 
+permissions:
+  contents: read
+  packages: write
+  attestations: write
+  id-token: write
+
 jobs:
   build-and-push:
     runs-on: ubuntu-latest