Skip to content

Commit

Permalink
Merge pull request #95 from DataDog/nina.rei/VULN-8308/update-permiss…
Browse files Browse the repository at this point in the history
…ions-for-workflow-jobs

Give elevated permissions on the job-level for specific workflows
  • Loading branch information
nina9753 authored Nov 6, 2024
2 parents 1117670 + c89dc92 commit 893cbfb
Show file tree
Hide file tree
Showing 2 changed files with 8 additions and 1 deletion.
4 changes: 4 additions & 0 deletions .github/workflows/auto_release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,10 @@ on:
jobs:
build:
runs-on: ubuntu-latest
permissions:
pull-requests: write
packages: write
contents: write
steps:
- name: Checkout
uses: actions/checkout@v4
Expand Down
5 changes: 4 additions & 1 deletion .github/workflows/update_apps.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# Disabled in favor of
# Disabled in favor of
# https://github.com/DataDog/serverless-self-monitoring/blob/main/self_monitor/azure/launch.sh

name: update_self_monitoring_apps
Expand All @@ -13,6 +13,9 @@ permissions:
jobs:
update_apps:
runs-on: ubuntu-latest
permissions:
pull-requests: write
packages: write
# Set the env for Azure managed identity federated credentials for OIDC
# https://github.com/marketplace/actions/azure-login#login-with-openid-connect-oidc-recommendeda
environment: dev
Expand Down

0 comments on commit 893cbfb

Please sign in to comment.