Skip to content

Commit 564f7d2

Browse files
committed
removes permissions block in reusable workflows
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
1 parent 6492023 commit 564f7d2

3 files changed

Lines changed: 0 additions & 19 deletions

File tree

.github/workflows/.test.yml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,6 @@ concurrency:
44
group: ${{ github.workflow }}-${{ github.ref }}
55
cancel-in-progress: true
66

7-
permissions:
8-
contents: read
9-
107
on:
118
workflow_dispatch:
129
push:

.github/workflows/bake.yml

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -149,8 +149,6 @@ env:
149149
jobs:
150150
prepare:
151151
runs-on: ubuntu-24.04
152-
permissions:
153-
contents: read
154152
outputs:
155153
includes: ${{ steps.set.outputs.includes }}
156154
steps:
@@ -273,9 +271,6 @@ jobs:
273271
runs-on: ${{ matrix.runner }}
274272
needs:
275273
- prepare
276-
permissions:
277-
contents: read
278-
id-token: write # for signing attestation manifests and/or registry authentication with GitHub OIDC Token
279274
strategy:
280275
fail-fast: false
281276
matrix:
@@ -656,9 +651,6 @@ jobs:
656651
657652
finalize:
658653
runs-on: ubuntu-24.04
659-
permissions:
660-
contents: read
661-
id-token: write # for registry authentication with OIDC if needed
662654
outputs:
663655
cosign-version: ${{ env.COSIGN_VERSION }}
664656
cosign-verify-commands: ${{ steps.set.outputs.cosign-verify-commands }}

.github/workflows/build.yml

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -160,8 +160,6 @@ env:
160160
jobs:
161161
prepare:
162162
runs-on: ubuntu-24.04
163-
permissions:
164-
contents: read
165163
outputs:
166164
includes: ${{ steps.set.outputs.includes }}
167165
steps:
@@ -227,9 +225,6 @@ jobs:
227225
runs-on: ${{ matrix.runner }}
228226
needs:
229227
- prepare
230-
permissions:
231-
contents: read
232-
id-token: write # for signing attestation manifests and/or registry authentication with GitHub OIDC Token
233228
strategy:
234229
fail-fast: false
235230
matrix:
@@ -550,9 +545,6 @@ jobs:
550545
551546
finalize:
552547
runs-on: ubuntu-24.04
553-
permissions:
554-
contents: read
555-
id-token: write # for registry authentication with OIDC if needed
556548
outputs:
557549
cosign-version: ${{ env.COSIGN_VERSION }}
558550
cosign-verify-commands: ${{ steps.set.outputs.cosign-verify-commands }}

0 commit comments

Comments
 (0)