Address more CI security warnings (#5302)

unicode-org · Jul 25, 2024 · f2bcba5 · f2bcba5
1 parent 007c2df
commit f2bcba5
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 2 deletions.
diff --git a/.github/workflows/artifacts-build.yml b/.github/workflows/artifacts-build.yml
@@ -178,7 +178,7 @@ jobs:
       run: |
         cd ffi/npm
         make lib/index.mjs
-        npm install typedoc
+        npm install typedoc@0.26.5 --exact
         node_modules/typedoc/bin/typedoc lib/index.d.ts --out docs --readme ../../tutorials/js.md --basePath lib
         cd ../..
         
@@ -490,7 +490,7 @@ jobs:
     # Job-specific dependencies
     - name: Install npm tools
       run: |
-        npm install -g wasm-opt
+        npm install -g wasm-opt@1.4.0 --exact
     
     # Actual job
     - name: Build wasm executables

diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml
@@ -31,6 +31,9 @@ on:
     # Run beta slightly later
     - cron:  '1 14 * * *'
 
+permissions:
+  contents: read
+
 concurrency:
   # Allow one run at a time for PRs, but multiple for other invocations
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}

diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
@@ -8,6 +8,9 @@ on:
   push:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   test: