Skip to content

Commit

Permalink
ci: Reduce workflow permissions
Browse files Browse the repository at this point in the history
  • Loading branch information
SMadani committed Nov 20, 2024
1 parent 538f8b9 commit 14a1370
Show file tree
Hide file tree
Showing 3 changed files with 2 additions and 19 deletions.
10 changes: 1 addition & 9 deletions .github/workflows/build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,16 +6,8 @@ on:
pull_request:

permissions:
actions: write
checks: write
contents: read
deployments: none
issues: read
discussions: none
packages: none
pages: read
pull-requests: write
security-events: write
checks: write
statuses: write

jobs:
Expand Down
9 changes: 0 additions & 9 deletions .github/workflows/publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,17 +4,8 @@ on:
types: [published]

permissions:
actions: write
checks: write
contents: read
deployments: read
issues: write
discussions: none
packages: write
pages: write
pull-requests: read
security-events: read
statuses: write

jobs:
publish:
Expand Down
2 changes: 1 addition & 1 deletion SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,6 @@ Only the latest version of the SDK is supported.
## Reporting a Vulnerability

To report a security concern, use the "[Report a Vulnerability](https://github.com/Vonage/vonage-kotlin-sdk/security/advisories/new)" tab.
You can also contact the Developer Relations team directly via [email](devrel@vonage.com] for more private disclosure.
You can also contact the Developer Relations team directly via [email](devrel@vonage.com) for more private disclosure.
You can also [raise an Issue](https://github.com/Vonage/vonage-kotlin-sdk/issues/new/choose) and/or create a [Pull Request](https://github.com/Vonage/vonage-kotlin-sdk/pulls) from your fork of the repo.
Please include as much detail as possible, an indication of severity and, ideally, a minimal reproducible example to demonstrate the issue if possible.

0 comments on commit 14a1370

Please sign in to comment.