common: permission test

Signed-off-by: Tomasz Gromadzki <[email protected]>
grom72 · Sep 23, 2024 · 2818944 · 2818944
1 parent 60833b9
commit 2818944
Show file tree

Hide file tree

Showing 16 changed files with 16 additions and 32 deletions.
diff --git a/.github/workflows/docker_rebuild.yml b/.github/workflows/docker_rebuild.yml
@@ -23,8 +23,7 @@ env:
   WORKDIR:     utils/docker
   PUSH_IMAGE:  1
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   image:

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -5,8 +5,7 @@ on:
   workflow_dispatch:
   pull_request:
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   src_checkers:

diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
@@ -19,8 +19,7 @@ env:
   PMDK_CXX:       g++
   SRC_CHECKERS:   0
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   in-tree:

diff --git a/.github/workflows/pmem_benchmark.yml b/.github/workflows/pmem_benchmark.yml
@@ -10,8 +10,7 @@ on:
         type: string
         default: master
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   prep_runtime:

diff --git a/.github/workflows/pmem_ras.yml b/.github/workflows/pmem_ras.yml
@@ -30,8 +30,7 @@ on:
     # run this job every 8 hours
     - cron:  '0 */8 * * *'
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   linux:

diff --git a/.github/workflows/pmem_test_matrix.yml b/.github/workflows/pmem_test_matrix.yml
@@ -17,8 +17,7 @@ on:
         type: number
         default: 360 # The jobs.<job_id>.timeout-minutes default.
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   job:

diff --git a/.github/workflows/pmem_tests.yml b/.github/workflows/pmem_tests.yml
@@ -9,8 +9,7 @@ on:
     # run this job at 18:00 UTC every day
     - cron:  '0 18 * * *'
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   # Test the default build with the basic test suite.

diff --git a/.github/workflows/scan_bandit.yml b/.github/workflows/scan_bandit.yml
@@ -9,8 +9,7 @@ env:
   PMREORDER: src/tools/pmreorder/*.py
   CALL_STACKS_ANALYSIS: utils/call_stacks_analysis/*.py
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   bandit:

diff --git a/.github/workflows/scan_coverage.yml b/.github/workflows/scan_coverage.yml
@@ -24,8 +24,7 @@ env:
   TEST_BUILD:   debug
   FAULT_INJECTION: 1
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   linux:

diff --git a/.github/workflows/scan_coverity.yml b/.github/workflows/scan_coverity.yml
@@ -21,8 +21,7 @@ env:
   VALGRIND:     1
   COVERITY:     1
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   linux:

diff --git a/.github/workflows/scan_documentation.yml b/.github/workflows/scan_documentation.yml
@@ -4,8 +4,7 @@ name: Documentation
 on:
   workflow_call:
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   linux:

diff --git a/.github/workflows/scan_log_calls.yml b/.github/workflows/scan_log_calls.yml
@@ -5,8 +5,7 @@ on:
   workflow_dispatch:
   workflow_call:
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   log-calls:

diff --git a/.github/workflows/scan_stack_usage.yml b/.github/workflows/scan_stack_usage.yml
@@ -8,8 +8,7 @@ on:
 env:
   CALL_STACKS_TOOLS_PATH: pmdk/utils/call_stacks_analysis
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   stack-usage:

diff --git a/.github/workflows/scan_ubsan.yml b/.github/workflows/scan_ubsan.yml
@@ -18,8 +18,7 @@ env:
   UBSAN:        1
   FAULT_INJECTION: 1
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   linux:

diff --git a/.github/workflows/scans.yml b/.github/workflows/scans.yml
@@ -7,8 +7,7 @@ on:
     # run this job at 00:00 UTC every day
     - cron:  '0 0 * * *'
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   call-bandit:

diff --git a/.github/workflows/ubuntu.yml b/.github/workflows/ubuntu.yml
@@ -8,8 +8,7 @@ env:
   GITHUB_REPO: pmem/pmdk
   DOCKER_REPO: ghcr.io/pmem/pmdk
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   linux: