From a11d5c64c99ce9d8e2c54c43cceff9b29494e109 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marius=20Co=C8=9Bofan=C4=83?= Date: Wed, 25 Jun 2025 10:21:40 +0200 Subject: [PATCH 1/2] [build] Define other workflow permissions (#1) --- .github/workflows/ci.yml | 3 +++ .github/workflows/release.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 235b373..e53387e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -6,6 +6,9 @@ on: pull_request: branches: [main] +permissions: + contents: write + jobs: build: name: Build diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fdacaf6..ba106a2 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,6 +5,9 @@ on: tags: - "v*" +permissions: + contents: write + jobs: release: runs-on: ubuntu-latest From 07d5b0f0f25efa052c873729abd77f3c56e6c84d Mon Sep 17 00:00:00 2001 From: Marius Cotofana Date: Mon, 15 Dec 2025 13:15:45 +0100 Subject: [PATCH 2/2] Pin GH actions --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ba106a2..ca772ca 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -26,7 +26,7 @@ jobs: run: go test ./... -v - name: Run GoReleaser - uses: goreleaser/goreleaser-action@v6 + uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0 with: version: latest args: release --clean