Skip to content

Commit f475241

Browse files
committed
stop downgrading reusable workflow permissions
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
1 parent 41677d1 commit f475241

3 files changed

Lines changed: 7 additions & 6 deletions

File tree

.github/workflows/.build.yml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,6 @@
11
# reusable workflow
22
name: .build
33

4-
permissions:
5-
contents: read
6-
74
on:
85
workflow_call:
96
inputs:

.github/workflows/.pkgs.yml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,6 @@
11
# reusable workflow
22
name: .pkgs
33

4-
permissions:
5-
contents: read
6-
74
on:
85
workflow_call:
96
outputs:

.github/zizmor.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,10 @@
11
rules:
2+
# rule does not apply to reusable worfklows where permissions are defined by
3+
# the caller workflow and not the reusable workflow itself
4+
excessive-permissions:
5+
ignore:
6+
- .build.yml
7+
- .pkgs.yml
8+
29
secrets-outside-env: # FIXME: remove this rule when zizmor 1.24.0 is released, fixing the right persona attached to this rule: https://github.com/zizmorcore/zizmor/pull/1783
310
disable: true

0 commit comments

Comments
 (0)