Move permissions at top level

Signed-off-by: David Cassany <dcassany@suse.com>
rancher · Jul 4, 2024 · 93b226f · 93b226f
1 parent 43fd9b7
commit 93b226f
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 28 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -20,9 +20,9 @@ on:
       - examples/**
 
 jobs:
+  permissions:
+    content: read
   detect:
-    permissions:
-      content: read
     runs-on: ubuntu-latest
     outputs:
       flavor: ${{ steps.set-matrix.outputs.flavor }}
@@ -43,7 +43,6 @@ jobs:
     needs:
       - detect
     permissions:
-      content: read
       packages: write
     runs-on: ubuntu-latest
     env:
@@ -66,8 +65,6 @@ jobs:
           make DOCKER_ARGS=--push build
 
   build-matrix:
-    permissions:
-      content: read
     needs:
       - detect
       - build-toolkit

diff --git a/.github/workflows/build_and_test_arm.yaml b/.github/workflows/build_and_test_arm.yaml
@@ -16,9 +16,9 @@ concurrency:
 
 jobs:
 
+  permissions:
+    content: read
   build-iso:
-    permissions:
-      content: read
     needs: detect
     runs-on: [self-hosted, arm64]
     env:
@@ -59,8 +59,6 @@ jobs:
           enableCrossOsArchive: true
 
   build-disk:
-    permissions:
-      content: read
     needs: detect
     runs-on: [self-hosted, arm64]
     env:
@@ -105,8 +103,6 @@ jobs:
           enableCrossOsArchive: true
 
   tests-matrix:
-    permissions:
-      content: read
     needs: 
       - build-disk
       - detect
@@ -166,8 +162,6 @@ jobs:
           make test-clean
 
   test-installer:
-    permissions:
-      content: read
     needs: 
       - build-iso
       - detect

diff --git a/.github/workflows/build_and_test_x86.yaml b/.github/workflows/build_and_test_x86.yaml
@@ -12,10 +12,11 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  permissions:
+      content: read
   build-os:
     permissions:
       packages: write
-      content: read
     runs-on: ubuntu-latest
     env:
       FLAVOR: ${{ inputs.flavor }}
@@ -41,8 +42,6 @@ jobs:
           make ARCH=${{ env.ARCH }} DOCKER_ARGS=--push build-os
 
   build-iso:
-    permissions:
-      content: read
     needs: 
       - build-os
     runs-on: ubuntu-latest
@@ -85,8 +84,6 @@ jobs:
           enableCrossOsArchive: true
 
   build-disk:
-    permissions:
-      content: read
     needs:
       - build-os
     runs-on: ubuntu-latest
@@ -136,8 +133,6 @@ jobs:
           enableCrossOsArchive: true
 
   detect:
-    permissions:
-      content: read
     runs-on: ubuntu-latest
     outputs:
       tests: ${{ steps.detect.outputs.tests }}
@@ -168,8 +163,6 @@ jobs:
           echo "toolkit=ghcr.io/rancher/elemental-toolkit/elemental-cli:${VERSION}" >> $GITHUB_OUTPUT
 
   tests-matrix:
-    permissions:
-      content: read
     needs:
       - build-disk
       - detect
@@ -243,8 +236,6 @@ jobs:
           make test-clean
 
   test-installer:
-    permissions:
-      content: read
     needs:
       - build-iso
       - detect

diff --git a/.github/workflows/cli.yaml b/.github/workflows/cli.yaml
@@ -15,9 +15,9 @@ on:
     branches:
       - main
 jobs:
+  permissions:
+    content: read
   build:
-    permissions:
-      content: read
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code

diff --git a/.github/workflows/docs-publish.yaml b/.github/workflows/docs-publish.yaml
@@ -9,9 +9,9 @@ on:
   schedule:
    - cron: 0 20 * * *
 jobs:
+  permissions:
+    content: read
   build-deploy:
-    permissions:
-      content: read
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo