🛂 ensure right permissions for workflows (#46)

Signed-off-by: burgholzer <[email protected]>
cda-tum · Oct 14, 2024 · 5949a52 · 5949a52
1 parent d0c22de
commit 5949a52
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/reusable-cpp-coverage.yml b/.github/workflows/reusable-cpp-coverage.yml
@@ -20,7 +20,8 @@ jobs:
     name: 📈 Coverage
     runs-on: ubuntu-latest
     permissions:
-      id-token: write
+      contents: read # Required for the `actions/checkout` action
+      id-token: write # Required for the `codecov/codecov-action` action
     env:
       CMAKE_BUILD_PARALLEL_LEVEL: 4
       CTEST_PARALLEL_LEVEL: 4

diff --git a/.github/workflows/reusable-python-ci.yml b/.github/workflows/reusable-python-ci.yml
@@ -57,7 +57,8 @@ jobs:
     needs: [python-tests]
     runs-on: ubuntu-latest
     permissions:
-      id-token: write
+      contents: read # Required for the `actions/checkout` action
+      id-token: write # Required for the `codecov/codecov-action` action
     steps:
       # check out the repository (mostly for the codecov config)
       - uses: actions/checkout@v4