ci: openSSF scorecard fixes, fix build-wheel

Signed-off-by: Terri Oda <terri.oda@intel.com>
intel · May 30, 2024 · 5e5f82d · 5e5f82d
1 parent 1c1f3dc
commit 5e5f82d
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/.github/workflows/build-wheel.yml b/.github/workflows/build-wheel.yml
@@ -1,5 +1,7 @@
 name: Build pip wheel
 
+permissions: read-all
+
 on:
   push:
     branches: [ "main" ]
@@ -17,7 +19,7 @@ on:
       matrix:
         python-version:
         - "3.12"
-    if: github.repository == 'intel/cve-bin-tool' && github.ref == 'refs/heads/main' # run on origin repo only
+    if: github.repository == 'intel/cve-bin-tool' # run on origin repo only
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1

diff --git a/.github/workflows/testing.yml b/.github/workflows/testing.yml
@@ -1,5 +1,7 @@
 name: Testing
 
+permissions: read-all
+
 on:
   push:
   pull_request: