[all-commits] [llvm/llvm-project] f10189: [libc++][Github] Remove workflow-scoped write perm...

Aiden Grossman via All-commits all-commits at lists.llvm.org
Mon Feb 10 10:55:09 PST 2025


  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: f101899ae8582be276758fe44e12cbf723d23b03
      https://github.com/llvm/llvm-project/commit/f101899ae8582be276758fe44e12cbf723d23b03
  Author: Aiden Grossman <aidengrossman at google.com>
  Date:   2025-02-10 (Mon, 10 Feb 2025)

  Changed paths:
    M .github/workflows/libcxx-build-containers.yml

  Log Message:
  -----------
  [libc++][Github] Remove workflow-scoped write permissions (#126447)

This patch removes the workflow-scoped package write permissions in the
libcxx-build-containers workflow. The relevant permissions are already
present in the job, so this raises the potential for new jobs being
added to the workflow that do not need the permissions but having them
anyways. Not having workflow-scoped write permissions is security best
practice.

Fixes #126230.



To unsubscribe from these emails, change your notification settings at https://github.com/llvm/llvm-project/settings/notifications


More information about the All-commits mailing list