From 24a70da976b85ecb85e5c5be2894c438f4db8c2f Mon Sep 17 00:00:00 2001 From: harshitasao Date: Thu, 29 Aug 2024 03:47:18 +0530 Subject: [PATCH] made required changes Signed-off-by: harshitasao --- .github/workflows/codespell.yml | 1 + .github/workflows/reusable_build_docker.yaml | 1 + .github/workflows/reusable_test_packages.yaml | 2 +- 3 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml index ca85796ca2f..b5563c767ea 100644 --- a/.github/workflows/codespell.yml +++ b/.github/workflows/codespell.yml @@ -1,6 +1,7 @@ name: Codespell on: pull_request: + permissions: contents: read diff --git a/.github/workflows/reusable_build_docker.yaml b/.github/workflows/reusable_build_docker.yaml index 2bb77560fec..21d0ff57a30 100644 --- a/.github/workflows/reusable_build_docker.yaml +++ b/.github/workflows/reusable_build_docker.yaml @@ -24,6 +24,7 @@ on: # then we upload all the tarballs to be later downloaded by reusable_publish_docker workflow. # In this way, we don't need to publish any arch specific image, # and this "build" workflow is actually only building images. + permissions: contents: read diff --git a/.github/workflows/reusable_test_packages.yaml b/.github/workflows/reusable_test_packages.yaml index e90c40515e4..6c146688537 100644 --- a/.github/workflows/reusable_test_packages.yaml +++ b/.github/workflows/reusable_test_packages.yaml @@ -57,7 +57,7 @@ jobs: - name: Run tests env: LSAN_OPTIONS: "intercept_tls_get_addr=0" - uses: falcosecurity/testing@32e319ae505fb330ae74db4502e605a5e517ff22 # main + uses: falcosecurity/testing@main with: test-falco: 'true' test-falcoctl: 'true'