Skip to content

Commit c5df610

Browse files
authored
Merge pull request #398 from crazy-max/release-fix-perms2
stop downgrading reusable workflow permissions
2 parents 41677d1 + f475241 commit c5df610

3 files changed

Lines changed: 7 additions & 6 deletions

File tree

.github/workflows/.build.yml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,6 @@
11
# reusable workflow
22
name: .build
33

4-
permissions:
5-
contents: read
6-
74
on:
85
workflow_call:
96
inputs:

.github/workflows/.pkgs.yml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,6 @@
11
# reusable workflow
22
name: .pkgs
33

4-
permissions:
5-
contents: read
6-
74
on:
85
workflow_call:
96
outputs:

.github/zizmor.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,10 @@
11
rules:
2+
# rule does not apply to reusable worfklows where permissions are defined by
3+
# the caller workflow and not the reusable workflow itself
4+
excessive-permissions:
5+
ignore:
6+
- .build.yml
7+
- .pkgs.yml
8+
29
secrets-outside-env: # FIXME: remove this rule when zizmor 1.24.0 is released, fixing the right persona attached to this rule: https://github.com/zizmorcore/zizmor/pull/1783
310
disable: true

0 commit comments

Comments
 (0)