mirror of
https://github.com/microsoft/DirectXTex
synced 2024-11-21 12:00:06 +00:00
[StepSecurity] ci: Harden GitHub Actions (#507)
This commit is contained in:
parent
79b4ef0ef8
commit
3dc7ec1e82
7
.github/workflows/codeql.yml
vendored
7
.github/workflows/codeql.yml
vendored
@ -23,13 +23,18 @@ on:
|
||||
schedule:
|
||||
- cron: '43 3 * * 3'
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
analyze:
|
||||
name: Analyze (C/C++)
|
||||
runs-on: windows-latest
|
||||
timeout-minutes: 360
|
||||
permissions:
|
||||
security-events: write
|
||||
actions: read # for github/codeql-action/init to get workflow details
|
||||
contents: read # for actions/checkout to fetch code
|
||||
security-events: write # for github/codeql-action/autobuild to send a status report
|
||||
packages: read
|
||||
|
||||
steps:
|
||||
|
3
.github/workflows/main.yml
vendored
3
.github/workflows/main.yml
vendored
@ -21,6 +21,9 @@ on:
|
||||
- build/*.targets
|
||||
- build/*.yml
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
build:
|
||||
runs-on: ${{ matrix.os }}
|
||||
|
3
.github/workflows/test.yml
vendored
3
.github/workflows/test.yml
vendored
@ -24,6 +24,9 @@ on:
|
||||
env:
|
||||
DIRECTXTEX_MEDIA_PATH: ${{ github.workspace }}/Media
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
build:
|
||||
runs-on: ${{ matrix.os }}
|
||||
|
3
.github/workflows/vcpkg.yml
vendored
3
.github/workflows/vcpkg.yml
vendored
@ -15,6 +15,9 @@ on:
|
||||
- LICENSE
|
||||
- build/*
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
build:
|
||||
runs-on: ${{ matrix.os }}
|
||||
|
Loading…
Reference in New Issue
Block a user