This PR adds explicit permissions section to workflows. This is a security best practice because by default workflows run with extended set of permissions (except from on: pull_request from external forks). By specifying any permission explicitly all others are set to none. By using the principle of least privilege the damage a compromised workflow can do (because of an injection or compromised third party tool or action) is restricted.
It is recommended to have most strict permissions on the top level and grant write permissions on job level case by case.

You can view, comment on, or merge this pull request online at:

https://github.com/kamailio/kamailio/pull/3248

Commit Summary

112d412 build: harden main.yml permissions
eb2c9e8 build: harden pull_request.yml permissions

File Changes

(2 files)

M .github/workflows/main.yml (2)
M .github/workflows/pull_request.yml (2)

Patch Links:

—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you are subscribed to this thread.