1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
kyverno/.github/workflows/check-actions.yaml
Charles-Edouard Brétéché ca8888c2da
fix: token permissions (#7619)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-20 21:15:47 +00:00

28 lines
778 B
YAML

name: Check actions
on:
push:
branches:
- '*'
pull_request:
branches:
- 'main'
- 'release*'
permissions: {}
jobs:
check:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
- name: Ensure SHA pinned actions
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@555a30da2656b4a7cf47b107800bef097723363e # v2.1.3
with:
# slsa-github-generator requires using a semver tag for reusable workflows.
# See: https://github.com/slsa-framework/slsa-github-generator#referencing-slsa-builders-and-generators
allowlist: |
slsa-framework/slsa-github-generator