Changeset 60612

Timestamp:

08/06/2025 06:42:38 PM (4 weeks ago)

Author:

johnbillion

Message:

Build/Test Tools: Add some missing permissions to the GitHub Actions workflows.

These permissions are not required for a public repo but are required for a private repo, for example a private fork.

Props johnbillion, desrosj

See #63170

Location:

trunk/.github/workflows

Files:

• performance.yml (modified) (1 diff)
• reusable-check-built-files.yml (modified) (1 diff)
• reusable-phpunit-tests-v3.yml (modified) (1 diff)

trunk/.github/workflows/performance.yml

@@ -53 +53 @@
     runs-on: ubuntu-24.04
     if: ${{ ( github.repository == 'WordPress/wordpress-develop' || ( github.event_name == 'pull_request' && github.actor != 'dependabot[bot]' ) ) && ! contains( github.event.before, '00000000' ) }}
-    permissions: {}
+    permissions:
+      actions: read
     env:
       TARGET_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }}

trunk/.github/workflows/reusable-check-built-files.yml

@@ -34 +34 @@
     runs-on: ubuntu-24.04
     timeout-minutes: 10
+    permissions:
+      contents: read
     steps:
       - name: Checkout repository

trunk/.github/workflows/reusable-phpunit-tests-v3.yml

@@ -122 +122 @@
     runs-on: ${{ inputs.os }}
     timeout-minutes: ${{ inputs.coverage-report && 120 || inputs.php == '8.4' && 30 || 20 }}
+    permissions:
+      contents: read
 
     steps: