From 0d130ec70e5f2a1d6b8101bf2603ef962a142878 Mon Sep 17 00:00:00 2001 From: Daniel Joos Date: Mon, 8 Dec 2025 11:03:43 +0000 Subject: [PATCH] Add permissions to GitHub actions workflows, update actions versions --- .github/workflows/main.yml | 5 ++++- .github/workflows/release.yml | 14 +++++++++----- 2 files changed, 13 insertions(+), 6 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index da03787..dc00060 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -2,13 +2,16 @@ name: CI on: [pull_request] +permissions: + contents: read + jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@master + - uses: actions/checkout@v6 - name: Set up Go uses: actions/setup-go@v6 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2d95024..03cc699 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,25 +5,29 @@ on: tags: - '*' +# Minimal permissions required for GoReleaser to create GitHub Releases +permissions: + contents: write + jobs: goreleaser: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set up Go - uses: actions/setup-go@v2 + uses: actions/setup-go@v6 with: - go-version: 1.19 + go-version-file: 'go.mod' - name: Run GoReleaser - uses: goreleaser/goreleaser-action@v2 + uses: goreleaser/goreleaser-action@v6 with: version: latest - args: release --rm-dist + args: release --clean env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}