From a61f51b722dd5359f56fc482f7facd1b8b7b7748 Mon Sep 17 00:00:00 2001 From: Jan Calanog Date: Sun, 18 Feb 2024 02:33:31 +0700 Subject: [PATCH 1/3] security: add permissions block to workflows --- .github/workflows/test-reporter.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/test-reporter.yml b/.github/workflows/test-reporter.yml index 39b10a0..075682a 100644 --- a/.github/workflows/test-reporter.yml +++ b/.github/workflows/test-reporter.yml @@ -8,6 +8,10 @@ on: types: - completed +permissions: + contents: read + actions: read + jobs: report: runs-on: ubuntu-latest From 045ee6ec3f9bb4bc2dba420efc0d1184cefb0044 Mon Sep 17 00:00:00 2001 From: Miguel Allende Date: Wed, 8 Jul 2026 15:56:47 +0200 Subject: [PATCH 2/3] fix workflow permissions --- .github/workflows/test-reporter.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/test-reporter.yml b/.github/workflows/test-reporter.yml index 075682a..e7ce6e2 100644 --- a/.github/workflows/test-reporter.yml +++ b/.github/workflows/test-reporter.yml @@ -11,6 +11,7 @@ on: permissions: contents: read actions: read + checks: write jobs: report: From 72b7e604919fb98115b5fa9df9f1c7be4e7925ac Mon Sep 17 00:00:00 2001 From: Miguel Allende Date: Thu, 9 Jul 2026 10:38:25 +0200 Subject: [PATCH 3/3] scope write permissions to jobs --- .github/workflows/test-reporter.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/test-reporter.yml b/.github/workflows/test-reporter.yml index e7ce6e2..443cbe2 100644 --- a/.github/workflows/test-reporter.yml +++ b/.github/workflows/test-reporter.yml @@ -11,10 +11,13 @@ on: permissions: contents: read actions: read - checks: write jobs: report: + permissions: + contents: read + actions: read + checks: write runs-on: ubuntu-latest steps: - uses: elastic/apm-pipeline-library/.github/actions/test-report@current