yahoo_1999/fk-wazuh
1
0
Fork 0
forked from wazuh/wazuh-docker
Code Pull Requests Activity

Add explicit permissions to 4.x workflows

Browse Source
This commit is contained in:
jesusph04
2026-08-03 14:17:17 +02:00
parent 5eeada70d0
commit ee47a21851
3 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/4_build_and_push_images.yml
+4
View File
@@ -213,6 +213,10 @@ jobs:
notify: notify:
runs-on: codebuild-github-actions-codebuild-runner-devops-amd-${{ github.run_id }}-${{ github.run_attempt }} runs-on: codebuild-github-actions-codebuild-runner-devops-amd-${{ github.run_id }}-${{ github.run_attempt }}
permissions:
contents: read
needs: [setup, build-and-push] needs: [setup, build-and-push]
# Only run if NOT dev AND all products were selected # Only run if NOT dev AND all products were selected
if: ${{ inputs.dev == false && needs.setup.outputs.ALL_PRODUCTS_SELECTED == 'true' }} if: ${{ inputs.dev == false && needs.setup.outputs.ALL_PRODUCTS_SELECTED == 'true' }}
.github/workflows/4_pr_check.yml
+3
View File
@@ -12,6 +12,9 @@ on:
- 'wazuh-agent/**' - 'wazuh-agent/**'
- '.github/**' - '.github/**'
permissions:
contents: read
env: env:
ARTIFACTS_LOCAL_DIR: /home/runner/work/wazuh-docker/wazuh-docker/docker-images ARTIFACTS_LOCAL_DIR: /home/runner/work/wazuh-docker/wazuh-docker/docker-images
ARTIFACT_NAMES: | ARTIFACT_NAMES: |
CHANGELOG.md
+1 -1
View File
@@ -9,7 +9,7 @@
| Issue | Comment | | Issue | Comment |
| - | - | | - | - |
- Added explicit `permissions` blocks to the 4.x workflows to restrict the `GITHUB_TOKEN` scope ([#2461](https://github.com/wazuh/wazuh-docker/issues/2461))
### Removed ### Removed
| Issue | Comment | | Issue | Comment |