GitHub Workflows security hardening (#5992)

* build: harden update-changelog.yml permissions Signed-off-by: Alex <[email protected]> * build: harden tests.yml permissions Signed-off-by: Alex <[email protected]> * Update update-changelog.yml * Update tests.yml Co-authored-by: Dries Vints <[email protected]>
2022-09-20 08:19:54 -05:00
parent 4a73b5d57e
commit 9725129d74
2 changed files with 13 additions and 1 deletions
@@ -1,6 +1,14 @@
 name: Tests

-on: [push, pull_request]
+on:
+  push:
+    branches:
+      - master
+      - '*.x'
+  pull_request:
+
+permissions:
+  contents: read

 jobs:
  tests:
@@ -4,6 +4,10 @@ on:
  release:
    types: [released]

+permissions: {}
+
 jobs:
  update:
+    permissions:
+      contents: write
    uses: laravel/.github/.github/workflows/update-changelog.yml@main