PG-1238 Harden CI permissions (#376)

9 months ago · ec1a9c1978
parent f0f3e118b5
commit ec1a9c1978
2 changed files with 4 additions and 3 deletions
--- a/.github/workflows/postgresql-17-src-meson-perf.yml
+++ b/.github/workflows/postgresql-17-src-meson-perf.yml
@ -1,9 +1,7 @@
 name: Perf test
 on: [pull_request]
 permissions:
-  contents: write
-  pull-requests: write
-  repository-projects: write
+  contents: read

 jobs:
  build:
--- a/.github/workflows/postgresql-perf-results.yml
+++ b/.github/workflows/postgresql-perf-results.yml
@ -6,6 +6,9 @@ on:
    types:
      - completed

+permissions:
+  contents: read
+
 jobs:
  download:
    runs-on: ubuntu-latest