Harden CI permissions (#4950)

This commit is contained in:
Alexandru Ionut Tripon 2026-02-03 22:09:41 +00:00 committed by GitHub
commit 9e86c44f7c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
10 changed files with 40 additions and 9 deletions

View file

@ -24,6 +24,8 @@ on:
type: string
default: Debug
permissions: {}
jobs:
build:
name: Build (${{ matrix.artifact-name }})
@ -31,6 +33,7 @@ jobs:
environment: ${{ inputs.environment || '' }}
permissions:
contents: read
# Required for Azure Trusted Signing
id-token: write
# Required for vcpkg binary cache