Add explicit permissions to 4.x workflows. Backport to the 5.0.0 branch

2026-08-05 11:41:01 +02:00
2 changed files with 9 additions and 2 deletions
@@ -6,7 +6,7 @@ on:
    inputs:
      image_tag:
        description: 'Docker image tag'
-        default: '4.14.9'
+        default: '4.14.8'
        required: true
      docker_reference:
        description: 'wazuh-docker reference'
@@ -38,7 +38,7 @@ on:
    inputs:
      image_tag:
        description: 'Docker image tag'
-        default: '4.14.9'
+        default: '4.14.8'
        required: true
        type: string
      docker_reference:
@@ -213,6 +213,10 @@ jobs:

  notify:
    runs-on: codebuild-github-actions-codebuild-runner-devops-amd-${{ github.run_id }}-${{ github.run_attempt }}
+
+    permissions:
+      contents: read
+
    needs: [setup, build-and-push]
    # Only run if NOT dev AND all products were selected
    if: ${{ inputs.dev == false && needs.setup.outputs.ALL_PRODUCTS_SELECTED == 'true' }}
@@ -12,6 +12,9 @@ on:
      - 'wazuh-agent/**'
      - '.github/**'

+permissions:
+  contents: read
+
 env:
  ARTIFACTS_LOCAL_DIR: /home/runner/work/wazuh-docker/wazuh-docker/docker-images
  ARTIFACT_NAMES: |