build: harden docker-image.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
Alex committed
Nov 3, 2022 at 23:36 UTC
2d00514e229e30761d0c36b6bfcfce3178925fcc
1 file changed
+3
.github/workflows/docker-image.yml
+3
@@ -9,6 +9,9 @@ on:
9
tags:
10
- 'v*'
11
12
+permissions:
13
+ contents: read # to fetch code (actions/checkout)
14
+
15
jobs:
16
push_to_registry:
17
if: github.repository == 'ipfs/kubo' || github.event_name == 'workflow_dispatch'