Add gha permissions and remove snyk workflow (#135)

navikt · Sep 11, 2023 · 9f02c48 · 9f02c48
1 parent f9eec8f
commit 9f02c48
Show file tree

Hide file tree

Showing 5 changed files with 12 additions and 12 deletions.
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
@@ -9,6 +9,10 @@ on:
 
 jobs:
   monitor:
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
     uses: navikt/isworkflows/.github/workflows/codeql.yml@master
     with:
       languages: "[ 'java' ]"

diff --git a/.github/workflows/dependency-submission.yaml b/.github/workflows/dependency-submission.yaml
@@ -9,5 +9,7 @@ on:
 
 jobs:
   dependency_submission:
+    permissions:
+      contents: write
     uses: navikt/isworkflows/.github/workflows/gradle-dependency-submission.yml@master
     secrets: inherit
diff --git a/.github/workflows/dispatch.yaml b/.github/workflows/dispatch.yaml
@@ -12,6 +12,9 @@ on:
 jobs:
   deploy-dev:
     name: Deploy to NAIS Dev-gcp
+    permissions:
+      contents: read
+      id-token: write
     uses: navikt/isworkflows/.github/workflows/manual-deploy-dev.yml@master
     with:
       git-commit: ${{ github.event.inputs.gitCommit }}

diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
@@ -4,5 +4,8 @@ on: push
 
 jobs:
   build-and-deploy:
+    permissions:
+      contents: read
+      id-token: write
     uses: navikt/isworkflows/.github/workflows/kotlin-build-deploy.yml@master
     secrets: inherit
diff --git a/.github/workflows/snyk.yaml b/.github/workflows/snyk.yaml