Thanks to visit codestin.com
Credit goes to github.com

Skip to content

chore: Set permissions for GitHub actions #2827

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
naveensrinivasan wants to merge 1 commit into from
Closed

chore: Set permissions for GitHub actions #2827

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .github/workflows/coding-standards.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.sha }}
cancel-in-progress: true

permissions:
contents: read

jobs:
# Runs PHP coding standards checks.
#
Expand Down Expand Up @@ -161,6 +164,8 @@ jobs:
run: git diff --exit-code

slack-notifications:
permissions:
contents: none
name: Slack Notifications
uses: WordPress/wordpress-develop/.github/workflows/slack-notifications.yml@trunk
needs: [ phpcs, jshint ]
Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/end-to-end-tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,9 @@ concurrency:
env:
LOCAL_DIR: build

permissions:
contents: read

jobs:
# Runs the end-to-end test suite.
#
Expand Down Expand Up @@ -117,6 +120,8 @@ jobs:
run: git diff --exit-code

slack-notifications:
permissions:
contents: none
name: Slack Notifications
uses: WordPress/wordpress-develop/.github/workflows/slack-notifications.yml@trunk
needs: [ e2e-tests ]
Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/javascript-tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,6 +37,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.sha }}
cancel-in-progress: true

permissions:
contents: read

jobs:
# Runs the QUnit tests for WordPress.
#
Expand Down Expand Up @@ -86,6 +89,8 @@ jobs:
run: git diff --exit-code

slack-notifications:
permissions:
contents: none
name: Slack Notifications
uses: WordPress/wordpress-develop/.github/workflows/slack-notifications.yml@trunk
needs: [ test-js ]
Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/php-compatibility.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.sha }}
cancel-in-progress: true

permissions:
contents: read

jobs:

# Runs PHP compatibility testing.
Expand Down Expand Up @@ -101,6 +104,8 @@ jobs:
run: git diff --exit-code

slack-notifications:
permissions:
contents: none
name: Slack Notifications
uses: WordPress/wordpress-develop/.github/workflows/slack-notifications.yml@trunk
needs: [ php-compatibility ]
Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/phpunit-tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,9 @@ env:
LOCAL_PHP_MEMCACHED: ${{ false }}
SLOW_TESTS: 'external-http,media,restapi'

permissions:
contents: read

jobs:
# Runs the PHPUnit tests for WordPress.
#
Expand Down Expand Up @@ -243,6 +246,8 @@ jobs:
run: docker-compose run --rm -e WPT_REPORT_API_KEY -e WPT_PREPARE_DIR=/var/www -e WPT_TEST_DIR=/var/www php php test-runner/report.php

slack-notifications:
permissions:
contents: none
name: Slack Notifications
uses: WordPress/wordpress-develop/.github/workflows/slack-notifications.yml@trunk
needs: [ test-php ]
Expand Down
8 changes: 8 additions & 0 deletions .github/workflows/slack-notifications.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -164,6 +164,8 @@ jobs:

# Posts notifications when a workflow fails.
failure:
permissions:
contents: none
name: Failure notifications
runs-on: ubuntu-latest
timeout-minutes: 5
Expand All @@ -180,6 +182,8 @@ jobs:

# Posts notifications the first time a workflow run succeeds after previously failing.
fixed:
permissions:
contents: none
name: Fixed notifications
runs-on: ubuntu-latest
timeout-minutes: 5
Expand All @@ -196,6 +200,8 @@ jobs:

# Posts notifications when a workflow is successful.
success:
permissions:
contents: none
name: Success notifications
runs-on: ubuntu-latest
timeout-minutes: 5
Expand All @@ -212,6 +218,8 @@ jobs:

# Posts notifications when a workflow is cancelled.
cancelled:
permissions:
contents: none
name: Cancelled notifications
runs-on: ubuntu-latest
timeout-minutes: 5
Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/test-coverage.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,9 @@ env:
LOCAL_PHP_XDEBUG: true
LOCAL_PHP_MEMCACHED: ${{ false }}

permissions:
contents: read

jobs:
# Sets up WordPress for testing or development use.
#
Expand Down Expand Up @@ -170,6 +173,8 @@ jobs:
flags: multisite,php

slack-notifications:
permissions:
contents: none
name: Slack Notifications
uses: WordPress/wordpress-develop/.github/workflows/slack-notifications.yml@trunk
needs: [ test-coverage-report ]
Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/test-npm.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,9 @@ concurrency:
env:
PUPPETEER_SKIP_CHROMIUM_DOWNLOAD: ${{ true }}

permissions:
contents: read

jobs:
# Verifies that installing NPM dependencies and building WordPress works as expected.
#
Expand Down Expand Up @@ -156,6 +159,8 @@ jobs:
run: git diff --exit-code

slack-notifications:
permissions:
contents: none
name: Slack Notifications
uses: WordPress/wordpress-develop/.github/workflows/slack-notifications.yml@trunk
needs: [ test-npm, test-npm-macos ]
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/test-old-branches.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -80,6 +80,8 @@ jobs:
});

slack-notifications:
permissions:
contents: none
name: Slack Notifications
uses: WordPress/wordpress-develop/.github/workflows/slack-notifications.yml@trunk
needs: [ dispatch-workflows-for-old-branches ]
Expand Down