Skip to content

Commit fd5de20

Browse files
kyle-c-simmonsjoestringer
authored andcommitted
ci: Update hubble test workflow permissions
Signed-off-by: kysimmon <kylesimmons96@protonmail.com>
1 parent c2e2c23 commit fd5de20

File tree

2 files changed

+11
-0
lines changed

2 files changed

+11
-0
lines changed

.github/workflows/common-post-jobs.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -47,6 +47,8 @@ jobs:
4747
if: ${{ always() }}
4848
name: Commit Status Final
4949
runs-on: ubuntu-24.04
50+
permissions:
51+
statuses: write
5052
steps:
5153
- name: Set final commit status
5254
if: ${{ inputs.result != 'skipped' }}

.github/workflows/hubble-cli-integration-test.yaml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,7 @@ jobs:
5151
if: ${{ github.event_name == 'workflow_dispatch' }}
5252
name: Echo Workflow Dispatch Inputs
5353
runs-on: ubuntu-24.04
54+
permissions: {}
5455
steps:
5556
- name: Echo Workflow Dispatch Inputs
5657
run: |
@@ -59,6 +60,8 @@ jobs:
5960
commit-status-start:
6061
name: Commit Status Start
6162
runs-on: ubuntu-24.04
63+
permissions:
64+
statuses: write
6265
steps:
6366
- name: Set initial commit status
6467
uses: myrotvorets/set-commit-status-action@3730c0a348a2ace3c110851bed53331bc6406e9f # v2.0.1
@@ -67,6 +70,8 @@ jobs:
6770

6871
integration-test:
6972
runs-on: ubuntu-24.04
73+
permissions:
74+
contents: read
7075
env:
7176
job_name: "Integration Test"
7277
name: Hubble CLI Integration Test
@@ -206,6 +211,10 @@ jobs:
206211
if: ${{ always() }}
207212
needs: integration-test
208213
uses: ./.github/workflows/common-post-jobs.yaml
214+
permissions:
215+
contents: read
216+
actions: read
217+
statuses: write
209218
secrets: inherit
210219
with:
211220
context-ref: ${{ inputs.context-ref || github.sha }}

0 commit comments

Comments
 (0)