spiegel_podman/.github/workflows
Daniel Hast 30495081b7
ci: specify workflow permissions per job
Also remove some unnecessary permissions:

* The notification job in release-artifacts.yml only needs to read repo
  contents, not write contents and actions.
* All jobs in release.yml except "Create release" and "Update podman.io"
  only need to read repo contents. "Update podman.io" only needs to
  write repo contents and pull requests.
* Likewise, permissions for update-podmanio.yml can be restricted to
  only writing repo contents and pull requests.

Signed-off-by: Daniel Hast <hast.daniel@protonmail.com>
2025-12-01 08:42:39 -05:00
..
check_cirrus_cron.yml ci: pin 3rd-party action dependencies by commit hashes 2025-12-01 08:41:55 -05:00
dev-bump.yml ci: specify workflow permissions per job 2025-12-01 08:42:39 -05:00
first_contrib_cert_generator.yml ci: specify workflow permissions per job 2025-12-01 08:42:39 -05:00
issue-labeler.yml [skip-ci] Update github/issue-labeler action to v3.4 2024-02-02 23:24:07 +00:00
issue_pr_lock.yml ci: pin 3rd-party action dependencies by commit hashes 2025-12-01 08:41:55 -05:00
labeler.yml ci: specify workflow permissions per job 2025-12-01 08:42:39 -05:00
mac-pkg.yml ci: specify workflow permissions per job 2025-12-01 08:42:39 -05:00
machine-os-pr.yml ci: specify workflow permissions per job 2025-12-01 08:42:39 -05:00
needs-info-labeler.yaml ci: specify workflow permissions per job 2025-12-01 08:42:39 -05:00
release-artifacts.yml ci: specify workflow permissions per job 2025-12-01 08:42:39 -05:00
release.yml ci: specify workflow permissions per job 2025-12-01 08:42:39 -05:00
stale.yml [skip-ci] Update actions/stale action to v10 2025-09-04 09:11:18 +00:00
update-podmanio.yml ci: specify workflow permissions per job 2025-12-01 08:42:39 -05:00
upload-win-installer.yml ci: specify workflow permissions per job 2025-12-01 08:42:39 -05:00