Skip to content

Commit 233e3f7

Browse files
ketupiaketupia
committed
chore: add explicit permissions block to publishing workflows (contents: read) per GitHub Actions security best practices
1 parent 8645538 commit 233e3f7

2 files changed

Lines changed: 4 additions & 0 deletions

File tree

‎.github/workflows/open_vsx_publish.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: Publish Extension to OpenVSX
2+
permissions:
3+
contents: read
24

35
on:
46
release:

‎.github/workflows/vscode_marketplace_publish.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: Publish Extension to VS Code Marketplace
2+
permissions:
3+
contents: read
24

35
on:
46
release:

0 commit comments

Comments
 (0)