Changeset 60773

Timestamp:

09/17/2025 02:55:12 AM (5 months ago)

Author:

desrosj

Message:

Build/Test Tools: Add some missing permissions to the GitHub Actions workflows.

These permissions are not required for a public repo but are required for a private repo, for example a private fork.

Merges [60612], [60624] to the 6.8 branch.

Props johnbillion, desrosj.
See #63170

Location:

branches/6.8

Files:

• . (modified) (1 prop)
• .github/workflows/check-built-files.yml (modified) (1 diff)
• .github/workflows/performance.yml (modified) (1 diff)
• .github/workflows/upgrade-develop-testing.yml (modified) (1 diff)

branches/6.8/.github/workflows/check-built-files.yml

@@ -45 +45 @@
     if: ${{ github.repository == 'wordpress/wordpress-develop' && ( github.actor != 'dependabot[bot]' || github.event.commits < 2 ) }}
     uses: WordPress/wordpress-develop/.github/workflows/reusable-check-built-files.yml@trunk
+    permissions:
+      contents: read

branches/6.8/.github/workflows/performance.yml

@@ -53 +53 @@
     runs-on: ubuntu-24.04
     if: ${{ ( github.repository == 'WordPress/wordpress-develop' || ( github.event_name == 'pull_request' && github.actor != 'dependabot[bot]' ) ) && ! contains( github.event.before, '00000000' ) }}
-    permissions: {}
+    permissions:
+      actions: read
     env:
       TARGET_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }}

branches/6.8/.github/workflows/upgrade-develop-testing.yml

@@ -57 +57 @@
     if: ${{ github.repository == 'WordPress/wordpress-develop' || ( github.event_name == 'pull_request' && github.actor != 'dependabot[bot]' ) }}
     needs: [ build ]
+    permissions:
+      contents: read
     strategy:
       fail-fast: false